CVE-2014-1624

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating…

published January 28, 2014

CVSS
—
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Published
2014-01-28T00:00Z
EPSS history
Timeline
  • 28 JAN 00:00Z
    Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating…
    cvelistv5