PYSEC-2012-31

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/golismero/PYSEC-2012-31.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2012-31
Aliases
Withdrawn
2024-11-22T04:37:04Z
Published
2012-03-19T19:55:00Z
Modified
2026-06-10T17:01:03.174158461Z
Summary
[none]
Details

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.

References

Affected packages

PyPI / golismero

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.0.3
2.0.3-1

Database specific

source
"https://github.com/pypa/advisory-database/blob/main/vulns/golismero/PYSEC-2012-31.yaml"