Intel

CVE-2002-1119

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execu… (CVE-2002-1119)

noneEPSS 0.5%

Description

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

Source: CVELISTV5NVD

Metrics

Severity
none
Priority score
24.28
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
—
CVSS v3
—
CVSS v4
—
EPSS percentile
40.6 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
EPSS score
0.5 %
Low — model estimates < 1% exploitation likelihood.
Published
2004-09-01 04:00 UTC
CWE
—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • python

    python2.2.2

References & sources

IDCVE-2002-1119