Lucene search

CVE-2011-4944

🗓️ 27 Aug 2012 23:01:55Reported by redhatType

CVE-2011-4944: Python 2.6 through 3.2 creates world-readable ~/.pypirc file, allowing local users to obtain credentials

Reporter	Title	Published	Views	Family All 107
seebug.org	python 'distutils' Component '~/.pypirc'本地竞争条件漏洞	29 Mar 201200:00	–	seebug
Prion	Race condition	27 Aug 201223:55	–	prion
Cvelist	CVE-2011-4944	27 Aug 201223:00	–	cvelist
OpenVAS	Python < 2.7.4, 3.2.x < 3.2.4, 3.3.x < 3.3.1 pypirc created insecurely (bpo-13512) - Linux	1 Nov 202100:00	–	openvas
OpenVAS	RedHat Update for python RHSA-2012:0745-01	19 Jun 201200:00	–	openvas
OpenVAS	RedHat Update for python RHSA-2012:0745-01	19 Jun 201200:00	–	openvas
OpenVAS	CentOS Update for python CESA-2012:0745 centos5	30 Jul 201200:00	–	openvas
OpenVAS	CentOS Update for python CESA-2012:0745 centos5	30 Jul 201200:00	–	openvas
OpenVAS	RedHat Update for python RHSA-2012:0744-01	19 Jun 201200:00	–	openvas
OpenVAS	CentOS Update for python CESA-2012:0744 centos6	30 Jul 201200:00	–	openvas

Nvd

Node

python pythonMatch2.6.1

python pythonMatch2.6.2

python pythonMatch2.6.3

python pythonMatch2.6.4

python pythonMatch2.6.5

python pythonMatch2.6.6

python pythonMatch2.6.7

python pythonMatch2.6.8

python pythonMatch2.6.2150

python pythonMatch2.6.6150

python pythonMatch2.7.1

python pythonMatch2.7.1rc1

python pythonMatch2.7.2rc1

python pythonMatch2.7.3

python pythonMatch2.7.1150

python pythonMatch2.7.1150x64

python pythonMatch2.7.2150

python pythonMatch3.0

python pythonMatch3.0.1

python pythonMatch3.1

python pythonMatch3.1.1

python pythonMatch3.1.2

python pythonMatch3.1.3

python pythonMatch3.1.4

python pythonMatch3.1.5

python pythonMatch3.1.2150x64

python pythonMatch3.2

python pythonMatch3.2alpha

Source	Link
ubuntu	www.ubuntu.com/usn/USN-1596-1
secunia	www.secunia.com/advisories/51087
ubuntu	www.ubuntu.com/usn/USN-1616-1
openwall	www.openwall.com/lists/oss-security/2012/03/27/5
bugs	www.bugs.python.org/file23824/pypirc-secure.diff
openwall	www.openwall.com/lists/oss-security/2012/03/27/2
secunia	www.secunia.com/advisories/51040
ubuntu	www.ubuntu.com/usn/USN-1613-2
ubuntu	www.ubuntu.com/usn/USN-1592-1
ubuntu	www.ubuntu.com/usn/USN-1613-1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Aug 2012 23:55Current

8.1High risk

Vulners AI Score8.1

CVSS21.9

EPSS0.00045

CWE-264