CVEvulnerability

CVE-2011-2185

4.4 MEDIUM Published 2011-07-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-07-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-59

Description

Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.

Affected configurations

• fabfile fabric (<= 1.0.2) • fabfile fabric 0.9 • fabfile fabric 0.9.1 • fabfile fabric 0.9.2 • fabfile fabric 0.9.3 • fabfile fabric 0.9.4 • fabfile fabric 0.9.5 • fabfile fabric 0.9.6 • fabfile fabric 0.9.7 • fabfile fabric 1.0.0 • fabfile fabric 1.0.1

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References