| Package | Affected versions | Patched versions |
|---|---|---|
| python | = 2.4.5 |
Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free