Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Ralph Loader

#39503de 53,632
6.9CVSS total
Vulnerabilidades · 1
PT-2013-3603
6.9
2013-07-21
No Company Name Mentioned In The Text · Suds · CVE-2013-2217
**Name of the Vulnerable Software and Affected Versions** Suds version 0.4 **Description** The issue in Suds allows local users to potentially redirect SOAP queries and have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. This occurs when the tempdir is set to None in cache.py. **Recommendations** For Suds version 0.4, consider setting the tempdir to a directory that is not accessible by other users to prevent symlink attacks, or apply a fix that generates unpredictable cache file names.