CVE-2011-2765

Description

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

Weakness classification

• CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory