Executive Summary

Informations
Name	CVE-2011-4617	First vendor Publication	2011-12-30
Vendor	Cve	Last vendor Modification	2012-01-31

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:H/Au:N/C:N/I:P/A:N)
Cvss Base Score	1.2	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	High
Cvss Expoit Score	1.9	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4617

CWE : Common Weakness Enumeration

id	Name
CWE-59	Improper Link Resolution Before File Access ('Link Following')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Python Virtualenv cpe:/a:python:virtualenv:1.4.9 cpe:/a:python:virtualenv:1.4.8 cpe:/a:python:virtualenv:1.4.7 cpe:/a:python:virtualenv:1.4.6 cpe:/a:python:virtualenv:1.4.5 cpe:/a:python:virtualenv:1.4.4 cpe:/a:python:virtualenv:1.4.3 cpe:/a:python:virtualenv:1.4.2 cpe:/a:python:virtualenv:1.4.1 cpe:/a:python:virtualenv:1.4 cpe:/a:python:virtualenv:1.3.4 cpe:/a:python:virtualenv:1.3.3 cpe:/a:python:virtualenv:1.3.2 cpe:/a:python:virtualenv:1.3.1 cpe:/a:python:virtualenv:1.3 cpe:/a:python:virtualenv:1.2 cpe:/a:python:virtualenv:1.1.1 cpe:/a:python:virtualenv:1.1 cpe:/a:python:virtualenv:1.0 cpe:/a:python:virtualenv:0.9.2 cpe:/a:python:virtualenv:0.9.1 cpe:/a:python:virtualenv:0.9 cpe:/a:python:virtualenv:0.8.4 cpe:/a:python:virtualenv:0.8.3 cpe:/a:python:virtualenv:0.8.2 cpe:/a:python:virtualenv:0.8.1 cpe:/a:python:virtualenv:0.8	27

Open Source Vulnerability Database (OSVDB)

id	Description
77972	virtualenv virtualenv.py Temporary Files Symlink Arbitrary File Overwrite

Internal Sources (Detail)

Source	Url
CONFIRM	https://bitbucket.org/ianb/virtualenv/changeset/8be37c509fe5
FEDORA	http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071638... http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071643...
MLIST	http://openwall.com/lists/oss-security/2011/12/19/2 http://openwall.com/lists/oss-security/2011/12/19/4 http://openwall.com/lists/oss-security/2011/12/19/5
SECUNIA	http://secunia.com/advisories/47240

Alert History

Date	Informations
2013-05-10 23:11:07	Multiple Updates