python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
BID:66521
Info
python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
| Bugtraq ID: | 66521 |
| Class: | Race Condition Error |
| CVE: |
CVE-2014-2667 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 28 2014 12:00AM |
| Updated: | Apr 13 2015 09:20PM |
| Credit: | Ryan Lortie |
| Vulnerable: |
S.u.S.E. openSUSE 12.3 Python Software Foundation Python 3.4 Python Software Foundation Python 3.3 Python Software Foundation Python 3.2 |
| Not Vulnerable: | |
Discussion
python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
python is prone to a local race-condition vulnerability.
Successful exploits will allow attackers to obtain sensitive information and perform unauthorized actions that may aid in further attacks.
python is prone to a local race-condition vulnerability.
Successful exploits will allow attackers to obtain sensitive information and perform unauthorized actions that may aid in further attacks.
Exploit / POC
python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
python 'os._get_masked_mode()' Function Local Race Condition Vulnerability
References:
References:
- os.makedirs(exist_ok=True) is not thread-safe: umask is set temporary to 0, ser (Python)
- Python Homepage (Python Software Foundation)