CVE-2011-2765

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-08-20

Last modified

2024-09-16

Weaknesses

CWE-59

Affected products

• Pyro (Pyro Project)

References

• https://bugs.debian.org/631912
• https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e
• https://pythonhosted.org/Pyro/12-changes.html