CVE-2016-10345
18.04.2017, 20:59
In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| phusion | passenger | 𝑥 ≤ 5.0.30 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| passenger |
|
Common Weakness Enumeration
References