Lucene search
HistoryMay 08, 2014 - 2:29 p.m.
CVE-2014-1934
cve-2014-1934
eyed3
python
symlink attack
nvd
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
Affected configurations
Node
travis_shirkeyed3Range≤0.6.18
ORtravis_shirkeyed3Match0.1.0
ORtravis_shirkeyed3Match0.2.0
ORtravis_shirkeyed3Match0.3.0
ORtravis_shirkeyed3Match0.3.1
ORtravis_shirkeyed3Match0.4.0
ORtravis_shirkeyed3Match0.5.0
ORtravis_shirkeyed3Match0.5.1
ORtravis_shirkeyed3Match0.6.0-
ORtravis_shirkeyed3Match0.6.0rc1
ORtravis_shirkeyed3Match0.6.1
ORtravis_shirkeyed3Match0.6.2
ORtravis_shirkeyed3Match0.6.3
ORtravis_shirkeyed3Match0.6.4
ORtravis_shirkeyed3Match0.6.5
ORtravis_shirkeyed3Match0.6.6
ORtravis_shirkeyed3Match0.6.8
ORtravis_shirkeyed3Match0.6.9
ORtravis_shirkeyed3Match0.6.10
ORtravis_shirkeyed3Match0.6.11
ORtravis_shirkeyed3Match0.6.12
ORtravis_shirkeyed3Match0.6.13
ORtravis_shirkeyed3Match0.6.14
ORtravis_shirkeyed3Match0.6.15
ORtravis_shirkeyed3Match0.6.16
ORtravis_shirkeyed3Match0.6.17
ORtravis_shirkeyed3Match0.7.3
ORopensuseopensuseMatch12.3
ORopensuseopensuseMatch13.1
Related
nessus
nessus
Fedora 21 : python-eyed3-0.7.4-4.fc21 (2014-15450)
2014-12-07 00:00:00
Fedora 19 : python-eyed3-0.7.4-4.fc19 (2014-15477)
2014-12-02 00:00:00
Fedora 20 : python-eyed3-0.7.4-4.fc20 (2014-15464)
2014-12-02 00:00:00
openvas
openvas
Fedora Update for python-eyed3 FEDORA-2014-15464
2014-12-02 00:00:00
Fedora Update for python-eyed3 FEDORA-2014-15477
2014-12-02 00:00:00
Fedora Update for python-eyed3 FEDORA-2014-15450
2015-01-05 00:00:00
nvd
nvd
CVE-2014-1934
2014-05-08 14:29:14
prion
prion
Arbitrary file deletion
2014-05-08 14:29:00
osv
osv
eyeD3 is vulnerable to arbitrary file modification via symlink attack
2022-05-14 02:09:24
fedora
fedora
[SECURITY] Fedora 20 Update: python-eyed3-0.7.4-4.fc20
2014-12-01 19:04:23
[SECURITY] Fedora 21 Update: python-eyed3-0.7.4-4.fc21
2014-12-06 10:14:22
[SECURITY] Fedora 19 Update: python-eyed3-0.7.4-4.fc19
2014-12-01 19:04:18
debiancve
debiancve
CVE-2014-1934
2014-05-08 14:29:14
cvelist
cvelist
CVE-2014-1934
2014-05-08 14:00:00
github
github
eyeD3 is vulnerable to arbitrary file modification via symlink attack
2022-05-14 02:09:24
ubuntucve
ubuntucve
CVE-2014-1934
2014-05-08 00:00:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2014-1934