CVE-2013-4136

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of…

published September 30, 2013

CVSS
—
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.3th percentile
Published
2013-09-30T19:00Z
EPSS history
Timeline
  • 30 SEP 19:00Z
    ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of…
    cvelistv5