Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-01-28T00:00:00
Updated: 2017-08-28T12:57:01
Reserved: 2014-01-21T00:00:00
Link: CVE-2014-1624
JSON object: View
NVD Information
Status : Modified
Published: 2014-01-28T00:55:04.083
Modified: 2017-08-29T01:34:26.343
Link: CVE-2014-1624
JSON object: View
Redhat Information
No data.
CWE