Virtualenv Allows Symlink Attack on /tmp/
virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-4617US | low1.2 | — | ||
virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071638.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071643.htmlWEB
- http://openwall.com/lists/oss-security/2011/12/19/2WEB
- http://openwall.com/lists/oss-security/2011/12/19/4WEB
- http://openwall.com/lists/oss-security/2011/12/19/5WEB
- https://bitbucket.org/ianb/virtualenv/changeset/8be37c509fe5WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2011-23.yamlWEB
- https://github.com/pypa/virtualenvPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan