NVD

Id
11245  
Name
CVE-2011-4944  
Description
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-08-27  
Modified Date
2013-10-30  
Seq
2011-4944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62218 11245 CVE-2011-4944 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555  View
62219 11245 CVE-2011-4944 http://bugs.python.org/file23824/pypirc-secure.diff  View
62220 11245 CVE-2011-4944 http://bugs.python.org/issue13512  View
62221 11245 CVE-2011-4944 APPLE-SA-2013-10-22-3  View
62222 11245 CVE-2011-4944 [oss-security] 20120327 Re: CVE request: distutils creates ~/.pypirc insecurely  View
62223 11245 CVE-2011-4944 [oss-security] 20120327 CVE request: distutils creates ~/.pypirc insecurely  View
62224 11245 CVE-2011-4944 [oss-security] 20120327 Re: CVE request: distutils creates ~/.pypirc insecurely  View
62225 11245 CVE-2011-4944 USN-1592-1  View
62226 11245 CVE-2011-4944 USN-1596-1  View
62227 11245 CVE-2011-4944 USN-1613-1  View
62228 11245 CVE-2011-4944 USN-1613-2  View
62229 11245 CVE-2011-4944 USN-1615-1  View
62230 11245 CVE-2011-4944 USN-1616-1  View
62231 11245 CVE-2011-4944 https://bugzilla.redhat.com/show_bug.cgi?id=758905  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34882 JVNDB-2011-005124 Python におけるユーザ名およびパスワードを取得される脆弱性 Python は、~/.pypirc にデータが書き込まれた後、変更するまでのパーミッションが world-readable パーミッション (誰でも読み取り可能な権限) であるため、競合状態が発生することにより、ユーザ名およびパスワードを取得される脆弱性が存在します。 CVE-2011-4944 52851 CVE-2011-4944 11245 1.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005124.html 2011-11-30 2013-11-01 View