PT-2022-7739 · Phusion · Phusion Passenger

Published 2013-08-22 · Updated 2022-06-30 · CVE-2013-4146

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Phusion Passenger (affected versions not specified)

Description The issue arises from Phusion Passenger reusing existing server instance directories, which could lead to the removal or overwriting of files belonging to other instances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-4146

MGASA-2013-0253

Affected Products

Phusion Passenger

References · 6

• https://advisories.mageia.org/MGASA-2013-0253.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-4146 · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0253 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2013-July/112716.html · Vendor Advisory
• https://t.me/cibsecurity/45403 · Telegram Post
• https://bugs.mageia.org/show_bug.cgi?id=10890 · Note