Test ID:	1.3.6.1.4.1.25623.1.0.704415
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 4415-1 (passenger - security update)
Summary:	The remote host is missing an update for the 'passenger'; package(s) announced via the DSA-4415-1 advisory.
Description:	Summary: The remote host is missing an update for the 'passenger' package(s) announced via the DSA-4415-1 advisory. Vulnerability Insight: An arbitrary file read vulnerability was discovered in passenger, a web application server. A local user allowed to deploy an application to passenger, can take advantage of this flaw by creating a symlink from the REVISION file to an arbitrary file on the system and have its content displayed through passenger-status. Affected Software/OS: 'passenger' package(s) on Debian Linux. Solution: For the stable distribution (stretch), this problem has been fixed in version 5.0.30-1+deb9u1. We recommend that you upgrade your passenger packages. CVSS Score: 1.2 CVSS Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16355
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.