Test ID:	1.3.6.1.4.1.25623.1.0.106765
Category:	Web application abuses
Title:	Phusion Passenger File Overwrite Vulnerability
Summary:	Phusion Passenger is prone to a /tmp file overwrite vulnerability which;could allow local attackers to gain the privileges of the passenger user.
Description:	Summary: Phusion Passenger is prone to a /tmp file overwrite vulnerability which could allow local attackers to gain the privileges of the passenger user. Vulnerability Insight: With access to the system, a user could plant a symlink in /tmp that resulted in a chosen-file overwrite attempt whenever passenger-install-nginx-module was run, using the access rights of the executing user, potentially even with chosen content. Vulnerability Impact: A local attacker may gain privileges of the passenger user. Affected Software/OS: Phusion Passenger before version 5.1.0. Solution: Upgrade to version 5.1.0 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10345
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.