CVE-2011-2765 Insecure temporary file handling
An attacker can overwrite arbitrary files via symlink attacks on insecurely handled PID files, potentially leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2765?
CVE-2011-2765 is a high-severity path traversal vulnerability in n/a, published on 20 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
Weakness: CWE-59
Which versions are affected by CVE-2011-2765?
3 open source packages ship an affected version, including pyro. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pyro PyPI | All versions | 3.15 |
pyro PyPI | All versions | 3.15 |
pyro PyPI | All versions | 3.15 |
Products include Pyro Project Pyro.
How do I fix CVE-2011-2765?
Upgrade pyro to 3.15 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2011-2765 being exploited?
There is no known exploitation of CVE-2011-2765 in the wild and no public exploit code.
Sources
Also known as GHSA-xrr4-74mc-rpjc, PYSEC-2018-99.