CVE-2014-1832

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-*…

published February 19, 2015

CVSS
—
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.6th percentile
Published
2015-02-19T15:00Z
EPSS history
Timeline
  • 19 FEB 15:00Z
    Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-*…
    cvelistv5