CVE-2013-2119

Name of the Vulnerable Software and Affected Versions Phusion Passenger gem versions 3.0.0 through 3.0.20 Phusion Passenger gem versions 4.0.0 through 4.0.4

Description The issue allows local users to cause a denial of service or gain privileges by pre-creating a temporary config file in a directory with a predictable name in /tmp/ before it is used by the gem.

Recommendations For Phusion Passenger gem versions 3.0.0 through 3.0.20, update to version 3.0.21 or later. For Phusion Passenger gem versions 4.0.0 through 4.0.4, update to version 4.0.5 or later.