CVE

Id
5506  
CVE No.
CVE-2002-1119  
Status
Entry  
Description
os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29803 5506 CVE-2002-1119 MISC:http://mail.python.org/pipermail/python-dev/2002-August/027229.html  View
29804 5506 CVE-2002-1119 DEBIAN:DSA-159  View
29805 5506 CVE-2002-1119 URL:http://www.debian.org/security/2002/dsa-159  View
29806 5506 CVE-2002-1119 CONECTIVA:CLA-2002:527  View
29807 5506 CVE-2002-1119 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527  View
29808 5506 CVE-2002-1119 CALDERA:CSSA-2002-045.0  View
29809 5506 CVE-2002-1119 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt  View
29810 5506 CVE-2002-1119 MANDRAKE:MDKSA-2002:082  View
29811 5506 CVE-2002-1119 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-082.php  View
29812 5506 CVE-2002-1119 REDHAT:RHSA-2002:202  View
29813 5506 CVE-2002-1119 URL:http://www.redhat.com/support/errata/RHSA-2002-202.html  View
29814 5506 CVE-2002-1119 REDHAT:RHSA-2003:048  View
29815 5506 CVE-2002-1119 URL:http://www.redhat.com/support/errata/RHSA-2003-048.html  View
29816 5506 CVE-2002-1119 BUGTRAQ:20030123 [OpenPKG-SA-2003.006] OpenPKG Security Advisory (python)  View
29817 5506 CVE-2002-1119 URL:http://marc.info/?l=bugtraq&m=104333092200589&w=2  View
29818 5506 CVE-2002-1119 XF:python-execvpe-tmpfile-symlink(10009)  View
29819 5506 CVE-2002-1119 URL:http://www.iss.net/security_center/static/10009.php  View
29820 5506 CVE-2002-1119 BID:5581  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63693 JVNDB-2002-000020 Python におけるシンボリックリンク攻撃の脆弱性 Python に実装されている OS モジュール (os.py) において、os._execvpe() 関数を呼び出す際に、推測可能な名前を持つ一時ファイルを作成することにより、Python で作成されたプログラムは、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2002-1119 5506 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000020.html  View