Skip to content
OpenAdvisories

Archive

28 January 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    pyxdg Arbitrary File Overwrite via Race Condition

    Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to…

  • Low —

    RPLY Predictable Tmpfile Names Allows Cache Spoofing

    The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.