Lucene search
GoogleOSV:GHSA-3JHC-WJQF-5F2CHistoryMay 17, 2022 - 5:35 a.m.
Virtualenv Allows Symlink Attack on /tmp/
2022-05-1705:35:07
Google
osv.dev
8
virtualenv
symlink attack
/tmp
vulnerability
software
virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
References
lists.fedoraproject.org/pipermail/package-announce/2012-January/071638.html
lists.fedoraproject.org/pipermail/package-announce/2012-January/071643.html
openwall.com/lists/oss-security/2011/12/19/2
openwall.com/lists/oss-security/2011/12/19/4
openwall.com/lists/oss-security/2011/12/19/5
github.com/pypa/virtualenv
github.com/pypa/virtualenv/commit/68075ad9ededf7df2c46d385f836c13b729de2ca
nvd.nist.gov/vuln/detail/CVE-2011-4617
web.archive.org/web/20200228151935/https://bitbucket.org/ianb/virtualenv/commits/8be37c509fe5
Related
fedora
fedora
[SECURITY] Fedora 15 Update: python-virtualenv-1.7-1.fc15
2012-01-05 21:04:34
[SECURITY] Fedora 16 Update: python-virtualenv-1.7-1.fc16
2012-01-05 21:02:43
openvas
openvas
Gentoo Security Advisory GLSA 201206-17 (virtualenv)
2012-08-10 00:00:00
Fedora Update for python-virtualenv FEDORA-2011-17289
2012-04-02 00:00:00
Gentoo Security Advisory GLSA 201206-17 (virtualenv)
2012-08-10 00:00:00
cvelist
cvelist
CVE-2011-4617
2011-12-31 01:00:00
github
github
Virtualenv Allows Symlink Attack on /tmp/
2022-05-17 05:35:07
cve
cve
CVE-2011-4617
2011-12-31 01:55:00
osv
osv
PYSEC-2011-23
2011-12-31 01:55:00
prion
prion
Arbitrary file deletion
2011-12-31 01:55:00
nessus
nessus
Fedora 15 : python-virtualenv-1.7-1.fc15 (2011-17341)
2012-01-06 00:00:00
Fedora 16 : python-virtualenv-1.7-1.fc16 (2011-17289)
2012-01-06 00:00:00
GLSA-201206-17 : virtualenv: Insecure temporary file usage
2012-06-25 00:00:00
gentoo
gentoo
virtualenv: Insecure temporary file usage
2012-06-22 00:00:00
ubuntucve
ubuntucve
CVE-2011-4617
2011-12-31 00:00:00
debiancve
debiancve
CVE-2011-4617
2011-12-31 01:55:00
nvd
nvd
CVE-2011-4617
2011-12-31 01:55:00