Python robotframework-pabot insecure temporary File Creation Vulnerability

Python robotframework-pabot insecure temporary File Creation Vulnerability

Released on: 2014-09-07
Updated on: 2014-09-09

Affected Systems:
Python
Description:
Bugtraq id: 69659

Python is an object-oriented, literal translation computer programming language.

The implementation of robotframework-pabot 0.8 and other versions has an insecure temporary File Creation Vulnerability. Attackers with local access permissions can exploit this vulnerability to execute symbolic link attacks.

<* Source: Kurt Seifried (kurt@seifried.org)
*>

Suggestion:
Vendor patch:

Python
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Www.python.org

Python core programming version 2. (Wesley J. Chun). [Chinese version of hd pdf]

Python development technology details. (Zhou Wei, Zong Jie). [hd PDF scan version + book guide video + code]

Obtain Linux information using a Python script

Build a desktop algorithm transaction research environment using Python in Ubuntu

Python details: click here
Python: click here

This article permanently updates the link address: