Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2011-4944
HistoryAug 27, 2012 - 11:55 p.m.

CVE-2011-4944

2012-08-2723:55:01
Debian Security Bug Tracker
security-tracker.debian.org
14

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

10.1%

JSON

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

OSVersionArchitecturePackageVersionFilename
Debian11allpython2.7<Β 2.7.3~rc2-2python2.7_2.7.3~rc2-2_all.deb

Related

cve 2
prion 1
cvelist 1
openvas 35
seebug 1
nvd 2
ubuntucve 1
nessus 28
redhat 2
centos 2
ubuntu 6
veracode 2
amazon 1
oraclelinux 2
securityvulns 2
f5 1
debian 1
osv 1
vmware 1
ibm 1
suse 1
cve
cve
CVE-2011-4944
2012-08-27 23:55:01
CVE-2012-1587
2022-10-03 16:15:25
prion
prion
Race condition
2012-08-27 23:55:00
cvelist
cvelist
CVE-2011-4944
2012-08-27 23:00:00
openvas
openvas
Python < 2.7.4, 3.2.x < 3.2.4, 3.3.x < 3.3.1 pypirc created insecurely (bpo-13512) - Linux
2021-11-01 00:00:00
RedHat Update for python RHSA-2012:0745-01
2012-06-19 00:00:00
RedHat Update for python RHSA-2012:0745-01
2012-06-19 00:00:00
seebug
seebug
python 'distutils' Component '~/.pypirc'ζœ¬εœ°η«žδΊ‰ζ‘δ»ΆζΌζ΄ž
2012-03-29 00:00:00
nvd
nvd
CVE-2011-4944
2012-08-27 23:55:01
CVE-2012-1587
2012-08-27 23:55:01
ubuntucve
ubuntucve
CVE-2011-4944
2012-08-27 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : python (MDVSA-2013:117)
2013-04-20 00:00:00
RHEL 5 : python (RHSA-2012:0745)
2012-06-19 00:00:00
Scientific Linux Security Update : python on SL5.x i386/x86_64 (20120618)
2012-08-01 00:00:00
redhat
redhat
(RHSA-2012:0745) Moderate: python security update
2012-06-18 00:00:00
(RHSA-2012:0744) Moderate: python security update
2012-06-18 00:00:00
centos
centos
python, tkinter security update
2012-06-18 13:11:45
python, tkinter security update
2012-06-18 16:35:36
ubuntu
ubuntu
Python 3.2 vulnerabilities
2012-10-23 00:00:00
Python 2.7 vulnerabilities
2012-10-02 00:00:00
Python 3.1 vulnerabilities
2012-10-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:41:53
Information Disclosure
2019-05-02 04:41:53
amazon
amazon
Low: python26
2012-07-05 16:16:00
oraclelinux
oraclelinux
python security update
2012-06-18 00:00:00
python security update
2012-06-18 00:00:00
securityvulns
securityvulns
python multiple security vulnerabilities
2012-07-29 00:00:00
[ MDVSA-2012:096-1 ] python
2012-07-09 00:00:00
f5
f5
K75910138 : Python vulnerabilities CVE-2011-1521, CVE-2011-4940, CVE-2011-4944, CVE-2012-0845, and CVE-2012-1150
2018-09-11 00:00:00
debian
debian
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
osv
osv
python2.6 - security update
2014-07-31 00:00:00
vmware
vmware
VMware security updates for vSphere API and ESX Service Console
2012-11-15 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in python 2.6.4 used in OS Image for AIX shipped with IBM Cloud Pak System
2020-05-06 11:57:04
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

10.1%

JSON
Related for DEBIANCVE:CVE-2011-4944
cve2prion1cvelist1openvas35seebug1nvd2ubuntucve1nessus28redhat2centos2ubuntu6veracode2amazon1oraclelinux2securityvulns2f51debian1osv1vmware1ibm1suse1