IDCVSSSummaryLast (major) updatePublished
CVE-2014-1839 4.4
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
12-03-2014 - 14:43 11-03-2014 - 15:37
CVE-2014-1838 4.4
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
12-03-2014 - 14:38 11-03-2014 - 15:37
Back to Top Mark selected
Back to Top