Mandrake Linux Security Advisory : python (MDKSA-2002:082-1)

A vulnerability was discovered in python by Zack Weinberg in the way that the execvpe method from the os.py module uses a temporary file name. The file is created in an unsafe manner and execvpe tries to execute it, which can be used by a local attacker to execute arbitrary code with the privileg...

Symbolic links in python

os.py execvpe method creates temporary file insecurely...

PT-2002-1005 · Debian +1 · Idle +2

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.2.1 idle package in Debian GNU/Linux affected versions not specified Description: The issue concerns a predictable temporary file name generation in the os. execvpe function from os.py in Python, potentially allowin...