CVE-2002-1119 in Python

सारांश

द्वारा VulDB • 20/05/2026

os._execvpe from os.py in Python 2.2.1 aur usse pehle ke versions mein temporary files ko predictable names ke saath create karta hai, jisse local users symlink attack ke zariye arbitrary code execute kar sakte hain.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• प्रकटीकरण: 04/10/2002
• संयम: स्वीकृत
• प्रविष्टि: VDB-19030
• CPE: तैयार
• CWE: CWE-61 (पुष्टि की गई)
• CVSS: 5.9 (VulDB)
• EPSS: 0.00491
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Insurance, Energy, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1119
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1119
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1119/