logilab logilab-common 0.59.0

CPE Details

logilab logilab-common 0.59.0
logilab
logilab-common
0.59.0
2014-03-12
17h35 +00:00
2014-03-25
17h29 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:logilab:logilab-common:0.59.0:*:*:*:*:*:*:*

Informations

Vendor

logilab

Product

logilab-common

Version

0.59.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2014-1838 2014-03-11 14h00 +00:00 The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
4.4
CVE-2014-1839 2014-03-11 14h00 +00:00 The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
4.4