CVE-2012-6135
RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.
| Software | From | Fixed in |
|---|---|---|
| phusion / passenger | 4.0.0-beta1 | 4.0.0-beta1.x |
| phusion / passenger | 4.0.0-beta2 | 4.0.0-beta2.x |
| redhat / openshift | 1.0 | 1.0.x |
passenger
|
- | 4.0.0.rc4 |
- http://www.openwall.com/lists/oss-security/2013/03/02/1
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82533
- https://github.com/phusion/passenger/commit/8c6693e0818772c345c979840d28312c2edd4ba4
- https://old.blog.phusion.nl/2013/03/05/phusion-passenger-4-0-beta-1-and-2-arbitrary-file-deletion-vulnerability
- https://security-tracker.debian.org/tracker/CVE-2012-6135
- https://www.securityfocus.com/bid/58259
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime