Test ID:	1.3.6.1.4.1.25623.1.0.118266
Category:	General
Title:	Python < 2.7.4, 3.2.x < 3.2.4, 3.3.x < 3.3.1 pypirc created insecurely (bpo-13512) - Linux
Summary:	Python is prone to an access control vulnerability.
Description:	Summary: Python is prone to an access control vulnerability. Vulnerability Insight: Python creates '~ /.pypirc' with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file. Affected Software/OS: Python prior to version 2.7.4, versions 3.2.x prior to 3.2.4 and 3.3.x prior to 3.3.1. Solution: Update to version 2.7.4, 3.2.4, 3.3.1 or later. CVSS Score: 1.9 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4944 50858 http://secunia.com/advisories/50858 51024 http://secunia.com/advisories/51024 51040 http://secunia.com/advisories/51040 51087 http://secunia.com/advisories/51087 51089 http://secunia.com/advisories/51089 APPLE-SA-2013-10-22-3 http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html USN-1592-1 http://www.ubuntu.com/usn/USN-1592-1 USN-1596-1 http://www.ubuntu.com/usn/USN-1596-1 USN-1613-1 http://www.ubuntu.com/usn/USN-1613-1 USN-1613-2 http://www.ubuntu.com/usn/USN-1613-2 USN-1615-1 http://www.ubuntu.com/usn/USN-1615-1 USN-1616-1 http://www.ubuntu.com/usn/USN-1616-1 [oss-security] 20120327 CVE request: distutils creates ~/.pypirc insecurely http://www.openwall.com/lists/oss-security/2012/03/27/2 [oss-security] 20120327 Re: CVE request: distutils creates ~/.pypirc insecurely http://www.openwall.com/lists/oss-security/2012/03/27/10 http://www.openwall.com/lists/oss-security/2012/03/27/5 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555 http://bugs.python.org/file23824/pypirc-secure.diff http://bugs.python.org/issue13512 https://bugzilla.redhat.com/show_bug.cgi?id=758905 openSUSE-SU-2020:0086 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.