Skip to content
OpenAdvisories
Medium RHSA-2012:1206 1 CVE

Red Hat Security Advisory: python-paste-script security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server python-paste-script 0:1.7.3-5.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation python-paste-script 0:1.7.3-5.el6_3

Vulnerabilities 1

  • Medium 6.5
    CVE-2012-0878

    Paste Script has improper group memberships permissions

    Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

    paste pastescript pastescript Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=796790
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1206.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-0878
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0878
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0878