Lucene search

GoogleOSV:PYSEC-2013-9

HistoryAug 17, 2013 - 6:54 a.m.

PYSEC-2013-9

2013-08-1706:54:00

Google

osv.dev

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

JSON

pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

CPENameOperatorVersion
pipeq0.7
pipeq0.7.2
pipeq0.7.1
pipeq0.2.1
pipeq0.3
pipeq1.2.1
pipeq0.4
pipeq0.5
pipeq1.0.2
pipeq0.6.2

Name	Operator	Version
pip	eq	0.7
pip	eq	0.7.2
pip	eq	0.7.1
pip	eq	0.2.1
pip	eq	0.3
pip	eq	1.2.1
pip	eq	0.4
pip	eq	0.5
pip	eq	1.0.2
pip	eq	0.6.2

Rows per page:

1-10 of 241

References

lists.fedoraproject.org/pipermail/package-announce/2013-May/105952.html

lists.fedoraproject.org/pipermail/package-announce/2013-May/105989.html

lists.fedoraproject.org/pipermail/package-announce/2013-May/106311.html

www.openwall.com/lists/oss-security/2013/03/22/10

github.com/pypa/pip/issues/725

github.com/pypa/pip/pull/734/files

github.com/pypa/pip/pull/780/files

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

JSON

Related for OSV:PYSEC-2013-9