ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| passenger(RubyGems) | 0 | 4.0.6 | N/A |
CVSS Metrics
