python-suds Insecure Temporary File Creation Vulnerability

Bugtraq ID:	60827
Class:	Input Validation Error
CVE:	CVE-2013-2217
Remote:	No
Local:	Yes
Published:	Jun 27 2013 12:00AM
Updated:	Oct 25 2013 01:03AM
Credit:	Ralph Loader
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64
Not Vulnerable:

python-suds Insecure Temporary File Creation Vulnerability

python-suds is prone to an insecure temporary file-creation vulnerability because it creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Other attacks may also be possible.

python-suds Insecure Temporary File Creation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

python-suds Insecure Temporary File Creation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

python-suds Insecure Temporary File Creation Vulnerability

References:

• Python Homepage (Python Software Foundation)