CVE-2011-4944

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35.58%
Affected Products (NVD)
VendorProductVersion
pythonpython
2.6.1
pythonpython
2.6.2
pythonpython
2.6.3
pythonpython
2.6.4
pythonpython
2.6.5
pythonpython
2.6.6
pythonpython
2.6.7
pythonpython
2.6.8
pythonpython
2.6.2150
pythonpython
2.6.6150
pythonpython
2.7.1
pythonpython
2.7.1:rc1
pythonpython
2.7.2:rc1
pythonpython
2.7.3
pythonpython
2.7.1150
pythonpython
2.7.2150
pythonpython
3.0
pythonpython
3.0.1
pythonpython
3.1
pythonpython
3.1.1
pythonpython
3.1.2
pythonpython
3.1.3
pythonpython
3.1.4
pythonpython
3.1.5
pythonpython
3.1.2150
pythonpython
3.2
pythonpython
3.2:alpha
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
2.7.18-8+deb11u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.4
hardy
Fixed 2.4.5-1ubuntu4.4
released
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
python2.5
hardy
Fixed 2.5.2-2ubuntu6.2
released
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
raring
dne
python2.6
hardy
dne
lucid
Fixed 2.6.5-1ubuntu6.1
released
maverick
ignored
natty
Fixed 2.6.6-6ubuntu7.1
released
oneiric
Fixed 2.6.7-4ubuntu1.1
released
precise
dne
quantal
dne
raring
dne
python2.7
dapper
dne
hardy
dne
lucid
dne
maverick
ignored
natty
Fixed 2.7.1-5ubuntu2.2
released
oneiric
Fixed 2.7.2-5ubuntu1.1
released
precise
not-affected
quantal
not-affected
raring
not-affected
python3.1
hardy
dne
lucid
Fixed 3.1.2-0ubuntu3.2
released
maverick
ignored
natty
Fixed 3.1.3-1ubuntu1.2
released
oneiric
dne
precise
dne
quantal
dne
raring
dne
python3.2
hardy
dne
lucid
dne
maverick
dne
natty
Fixed 3.2-1ubuntu1.2
released
oneiric
Fixed 3.2.2-0ubuntu1.1
released
precise
Fixed 3.2.3-0ubuntu3.2
released
quantal
Fixed 3.2.3-6ubuntu3.1
released
raring
dne
python3.3
hardy
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
not-affected
raring
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpython2_7-1_0
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.7-2.36
fixed
suse enterprise server 12 SP1
2.7.9-20.6
fixed
suse enterprise server 12 SP2
2.7.9-24.2
fixed
suse enterprise server 12 SP3
2.7.13-27.1
fixed
suse enterprise server 12 SP4
2.7.13-28.11.2
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
libpython2_7-1_0-32bit
suse enterprise server 12
2.7.7-2.36
fixed
suse enterprise server 12 SP1
2.7.9-20.6
fixed
suse enterprise server 12 SP2
2.7.9-24.2
fixed
suse enterprise server 12 SP3
2.7.13-27.1
fixed
suse enterprise server 12 SP4
2.7.13-28.11.2
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
libpython3_4m1_0
suse enterprise server 12
3.4.1-2.38
fixed
suse enterprise server 12 SP1
3.4.1-12.1
fixed
suse enterprise server 12 SP2
3.4.1-12.1
fixed
suse enterprise server 12 SP3
3.4.6-24.1
fixed
suse enterprise server 12 SP4
3.4.6-25.16.1
fixed
suse enterprise server 12 SP5
3.4.6-25.29.1
fixed
libpython3_4m1_0-32bit
suse enterprise server 12 SP5
3.4.6-25.29.1
fixed
libpython3_6m1_0
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
suse enterprise server 12 SP5
3.6.8-2.13
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-base
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.7-2.36
fixed
suse enterprise server 12 SP1
2.7.9-20.6
fixed
suse enterprise server 12 SP2
2.7.9-24.2
fixed
suse enterprise server 12 SP3
2.7.13-27.1
fixed
suse enterprise server 12 SP4
2.7.13-28.11.2
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-base-32bit
suse enterprise server 12
2.7.7-2.36
fixed
suse enterprise server 12 SP1
2.7.9-20.6
fixed
suse enterprise server 12 SP2
2.7.9-24.2
fixed
suse enterprise server 12 SP3
2.7.13-27.1
fixed
suse enterprise server 12 SP4
2.7.13-28.11.2
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
python-curses
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-devel
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python-gdbm
suse enterprise desktop 15
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.2
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.2
fixed
suse enterprise sap 15
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.2
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.2
fixed
suse enterprise server 15
2.7.17-7.32.2
fixed
suse enterprise server 15 SP1
2.7.17-7.32.2
fixed
suse enterprise server 15 SP2
2.7.17-7.32.2
fixed
suse enterprise server 15 SP3
2.7.17-7.32.2
fixed
python-xml
suse enterprise desktop 15
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP1
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP2
2.7.17-7.32.1
fixed
suse enterprise desktop 15 SP3
2.7.17-7.32.1
fixed
suse enterprise sap 15
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP1
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP2
2.7.17-7.32.1
fixed
suse enterprise sap 15 SP3
2.7.17-7.32.1
fixed
suse enterprise server 12
2.7.7-2.36
fixed
suse enterprise server 12 SP1
2.7.9-20.6
fixed
suse enterprise server 12 SP2
2.7.9-24.2
fixed
suse enterprise server 12 SP3
2.7.13-27.1
fixed
suse enterprise server 12 SP4
2.7.13-28.11.2
fixed
suse enterprise server 12 SP5
2.7.13-28.31.1
fixed
suse enterprise server 15
2.7.17-7.32.1
fixed
suse enterprise server 15 SP1
2.7.17-7.32.1
fixed
suse enterprise server 15 SP2
2.7.17-7.32.1
fixed
suse enterprise server 15 SP3
2.7.17-7.32.1
fixed
python3
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-base
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 12
3.4.1-2.38
fixed
suse enterprise server 12 SP1
3.4.1-12.1
fixed
suse enterprise server 12 SP2
3.4.1-12.1
fixed
suse enterprise server 12 SP3
3.4.6-24.1
fixed
suse enterprise server 12 SP4
3.4.6-25.16.1
fixed
suse enterprise server 12 SP5
3.4.6-25.29.1
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-curses
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-dbm
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-devel
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-idle
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python3-tk
suse enterprise desktop 15
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP1
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP2
3.6.10-3.42.2
fixed
suse enterprise desktop 15 SP3
3.6.10-3.42.2
fixed
suse enterprise sap 15
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP1
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP2
3.6.10-3.42.2
fixed
suse enterprise sap 15 SP3
3.6.10-3.42.2
fixed
suse enterprise server 15
3.6.10-3.42.2
fixed
suse enterprise server 15 SP1
3.6.10-3.42.2
fixed
suse enterprise server 15 SP2
3.6.10-3.42.2
fixed
suse enterprise server 15 SP3
3.6.10-3.42.2
fixed
python36
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
suse enterprise server 12 SP5
3.6.8-2.13
fixed
python36-base
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
suse enterprise server 12 SP5
3.6.8-2.13
fixed
python36-curses
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-dbm
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-devel
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-doc
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-testsuite
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-tk
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
python36-tools
suse enterprise server 12 SP3
3.6.8-6.14.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
python
RHEL 6
0:2.6.6-29.el6_2.2
fixed
python-devel
RHEL 6
0:2.6.6-29.el6_2.2
fixed
python-libs
RHEL 6
0:2.6.6-29.el6_2.2
fixed
python-test
RHEL 6
0:2.6.6-29.el6_2.2
fixed
python-tools
RHEL 6
0:2.6.6-29.el6_2.2
fixed
tkinter
RHEL 6
0:2.6.6-29.el6_2.2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python26
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
python26-debuginfo
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
python26-devel
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
python26-libs
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
python26-test
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
python26-tools
Amazon Linux 1
0:2.6.8-2.28.amzn1
fixed
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555
http://bugs.python.org/file23824/pypirc-secure.diff
http://bugs.python.org/issue13512
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
http://secunia.com/advisories/50858
http://secunia.com/advisories/51024
http://secunia.com/advisories/51040
http://secunia.com/advisories/51087
http://secunia.com/advisories/51089
http://www.openwall.com/lists/oss-security/2012/03/27/10
http://www.openwall.com/lists/oss-security/2012/03/27/2
http://www.openwall.com/lists/oss-security/2012/03/27/5
http://www.ubuntu.com/usn/USN-1592-1
http://www.ubuntu.com/usn/USN-1596-1
http://www.ubuntu.com/usn/USN-1613-1
http://www.ubuntu.com/usn/USN-1613-2
http://www.ubuntu.com/usn/USN-1615-1
http://www.ubuntu.com/usn/USN-1616-1
https://bugzilla.redhat.com/show_bug.cgi?id=758905
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650555
http://bugs.python.org/file23824/pypirc-secure.diff
http://bugs.python.org/issue13512
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
http://secunia.com/advisories/50858
http://secunia.com/advisories/51024
http://secunia.com/advisories/51040
http://secunia.com/advisories/51087
http://secunia.com/advisories/51089
http://www.openwall.com/lists/oss-security/2012/03/27/10
http://www.openwall.com/lists/oss-security/2012/03/27/2
http://www.openwall.com/lists/oss-security/2012/03/27/5
http://www.ubuntu.com/usn/USN-1592-1
http://www.ubuntu.com/usn/USN-1596-1
http://www.ubuntu.com/usn/USN-1613-1
http://www.ubuntu.com/usn/USN-1613-2
http://www.ubuntu.com/usn/USN-1615-1
http://www.ubuntu.com/usn/USN-1616-1
https://bugzilla.redhat.com/show_bug.cgi?id=758905