Back to search
CVE-2014-1838
Published: Mar 11, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
openSUSE-SU-2014:0306
vendor-advisory
x_refsource_SUSE
57209
third-party-advisory
x_refsource_SECUNIA
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737051
x_refsource_CONFIRM
http://www.logilab.org/ticket/207561
x_refsource_CONFIRM
[oss-security] 20140131 CVE request: temp file issues in python's logilab-common module
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now