CVE-2011-4944

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduc… (CVE-2011-4944)

Description

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Source: CVELISTV5 NVD OSV

Metrics

Severity

none

21.58

—

no public PoC known

—

—

—

36.1 %

High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).

EPSS score

0.4 %

Low — model estimates < 1% exploitation likelihood.

Published

2012-08-27 23:00 UTC

CWE

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

python
python

References & sources

IDCVE-2011-4944