Ruby Phusion Passenger CVE-2014-1832 Incomplete Fix Insecure Temporary File Creation Vulnerability

Bugtraq ID:	65267
Class:	Design Error
CVE:	CVE-2014-1832
Remote:	No
Local:	Yes
Published:	Jan 30 2014 12:00AM
Updated:	Jan 30 2014 12:00AM
Credit:	Raphael Geissert
Vulnerable:	Phusion passenger 4.0.37
Not Vulnerable:	Phusion passenger 4.0.38

Ruby Phusion Passenger CVE-2014-1832 Incomplete Fix Insecure Temporary File Creation Vulnerability

Phusion Passenger gem for Ruby is prone to a vulnerability because it creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks.

Successfully mounting a symlink attack may allow the attacker to corrupt sensitive files or gain access to sensitive information. Other attacks may also be possible.

Note: This issue is the result of an incomplete fix for the issue described in BID 65207 (Ruby Phusion Passenger 'server instance directory' Insecure Temporary File Creation Vulnerability).

Ruby Phusion Passenger CVE-2014-1832 Incomplete Fix Insecure Temporary File Creation Vulnerability

References:

• Fix a symlink-related security vulnerability. (GitHub)
  
• Phusion Passenger Homepage (Phusion )
  
• Re: CVE request: temporary file issue in Passenger rubygem (Raphael Geissert)