Security Advisory

CVE-2014-1832

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-02-19 15:00:00

Last updated 2024-08-06 09:50:11

Assigner mitre

State PUBLISHED

Description

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

← Browse all CVEs View on cve.org ↗