CVE-2002-1119: Medium severity Python Software Foundation Python vulnerability
os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1119?
CVE-2002-1119 is classified as a moderate severity vulnerability due to the potential for arbitrary code execution via a symlink attack.
How do I fix CVE-2002-1119?
To fix CVE-2002-1119, upgrade to Python version 2.2.2 or later, where this issue has been resolved.
Who is affected by CVE-2002-1119?
CVE-2002-1119 affects users of Python 2.2.1 and earlier versions, including those using CPython.
What kind of attack does CVE-2002-1119 enable?
CVE-2002-1119 enables local users to execute arbitrary code by exploiting predictable temporary file names through a symlink attack.
Is CVE-2002-1119 still relevant today?
While CVE-2002-1119 is an older vulnerability, it is still relevant for systems running outdated versions of Python that have not been patched.