CVEvulnerability
CVE-2011-2765
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-08-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-59
Description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
Affected configurations
• pyro project pyro (< 3.15)
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- https://bugs.debian.org/631912 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e Third Party Advisory
- https://pythonhosted.org/Pyro/12-changes.html Vendor Advisory
- https://bugs.debian.org/631912 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e Third Party Advisory
- https://pythonhosted.org/Pyro/12-changes.html Vendor Advisory