ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2022-10-03T16:14:56
Updated: 2022-10-03T16:14:56
Reserved: 2022-10-03T00:00:00
Link: CVE-2013-4136
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-09-30T21:55:07.223
Modified: 2013-10-10T19:09:28.610
Link: CVE-2013-4136
JSON object: View
Redhat Information
No data.
CWE