CVEs-PoC/2002/CVE-2002-1119.md

CVE-2002-1119

Description

os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.

POC

Reference

• http://www.redhat.com/support/errata/RHSA-2003-048.html
• http://www.redhat.com/support/errata/RHSA-2003-048.html

Github

No PoCs found on GitHub currently.