CVE-2002-1119

Python <2.2.1 - Local Privilege Escalation

Title source: llm

Description

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

References (10)

Core 10

Core References

Broken Link, Third Party Advisory vendor-advisory x_refsource_caldera

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt

Third Party Advisory vendor-advisory x_refsource_mandrake

http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-082.php

Third Party Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-048.html

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=104333092200589&w=2

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2002-202.html

Patch, Vendor Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2002/dsa-159

Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5581

Mailing List, Vendor Advisory x_refsource_misc

http://mail.python.org/pipermail/python-dev/2002-August/027229.html

Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/10009.php

Scores

EPSS 0.0014

EPSS Percentile 34.2%

Details

Status published

Products (1)

python/python < 2.2.2

Published Oct 04, 2002

Tracked Since Feb 18, 2026