VDB
GCVE-110-MAGEIA-2014-89
GCVE-110-MAGEIA-2014-89
Advisory Published
f2py insecurely used a temporary file. A local attacker could use this flaw
to perform a symbolic link attack to modify an arbitrary file accessible to
the user running f2py (CVE-2014-1858, CVE-2014-1859).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-numpy | 0 (affected), 1.6.2-2.1.mga3 (unaffected), 0 (affected), 1.6.2-2.1.mga3 (unaffected) | — |
| Mageia | python-numpy | 1.8.0-1.1.mga4 (unaffected), 0 (affected), 0 (affected), 1.8.0-1.1.mga4 (unaffected) | — |
| Mageia | sqlmap | 0 (affected), 0.9-9.1.mga4 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.