cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
CPE | Name | Operator | Version |
---|---|---|---|
suds | eq | 0.4 | |
opensuse | eq | 12.3 | |
opensuse | eq | 12.2 | |
enterprise_linux | eq | 6.0 | |
enterprise_linux | eq | 5 |