Lucene search
GoogleOSV:GHSA-VPQP-HX68-P2WXHistoryMay 14, 2022 - 1:08 a.m.
Improper Link Resolution Before File Access in Suds
2022-05-1401:08:23
Google
osv.dev
10
0.0004 Low
EPSS
Percentile
5.1%
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
References
lists.opensuse.org/opensuse-updates/2013-07/msg00062.html
www.openwall.com/lists/oss-security/2013/06/27/8
www.ubuntu.com/usn/USN-2008-1
bugzilla.redhat.com/show_bug.cgi?id=978696
github.com/advisories/GHSA-vpqp-hx68-p2wx
github.com/pypa/advisory-database/tree/main/vulns/suds/PYSEC-2013-32.yaml
nvd.nist.gov/vuln/detail/CVE-2013-2217
Related
cve
cve
CVE-2013-2217
2013-09-23 20:55:07
nessus
nessus
openSUSE Security Update : python-suds-jurko (openSUSE-2016-1178)
2016-10-13 00:00:00
RHEL 7 : python-suds (Unpatched Vulnerability)
2024-06-03 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : suds vulnerability (USN-2008-1)
2013-10-25 00:00:00
securityvulns
securityvulns
[USN-2008-1] Suds vulnerability
2013-10-28 00:00:00
Suds symbolic links vulnerability
2013-10-28 00:00:00
osv
osv
PYSEC-2013-32
2013-09-23 20:55:00
PYSEC-2013-33
2013-09-23 20:55:00
nvd
nvd
CVE-2013-2217
2013-09-23 20:55:07
ubuntu
ubuntu
Suds vulnerability
2013-10-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2008-1)
2013-10-29 00:00:00
Mageia: Security Advisory (MGASA-2013-0224)
2022-01-28 00:00:00
Ubuntu Update for suds USN-2008-1
2013-10-29 00:00:00
freebsd
freebsd
py-suds -- vulnerable to symlink attacks
2013-09-23 00:00:00
prion
prion
Design/Logic Flaw
2013-09-23 20:55:00
ubuntucve
ubuntucve
CVE-2013-2217
2013-09-23 00:00:00
mageia
mageia
Updated python-suds package fixes security vulnerability
2013-07-21 13:25:10
cvelist
cvelist
CVE-2013-2217
2013-09-23 20:00:00
github
github
Improper Link Resolution Before File Access in Suds
2022-05-14 01:08:23
debiancve
debiancve
CVE-2013-2217
2013-09-23 20:55:07