CVE-2013-4136
Fixed in a distro release EPSS <1%
ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.
Products: phusion passenger
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| RubyGems | passenger | 4.0.6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | passenger | 3.0.13debian-1.2 |
| Debian 13 | passenger | 3.0.13debian-1.2 |
| Debian 14 | passenger | 3.0.13debian-1.2 |
| Red Hat openshift 1.2 | mod_passenger | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-mod_passenger | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger-debuginfo | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger-devel | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger-doc | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger-native | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | ruby193-rubygem-passenger-native-libs | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-file-tail | 0:1.0.5-4.el6op |
| Red Hat openshift 1.2 | rubygem-file-tail-doc | 0:1.0.5-4.el6op |
| Red Hat openshift 1.2 | rubygem-passenger | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-passenger-debuginfo | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-passenger-devel | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-passenger-doc | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-passenger-native | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-passenger-native-libs | 0:3.0.21-3.el6op |
| Red Hat openshift 1.2 | rubygem-spruz | 0:0.2.5-4.el6op |
| Red Hat openshift 1.2 | rubygem-spruz-doc | 0:0.2.5-4.el6op |
| SUSE Lifecycle Management Server 1.3 | rubygem-passenger | 3.0.14-0.14.1 |
| SUSE Studio Onsite 1.3 | rubygem-passenger | 3.0.14-0.14.1 |
| SUSE WebYast 1.3 | rubygem-passenger | 3.0.14-0.14.1 |