Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2015-1326

python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
canonical

Description

python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu python-dbusmock

  • unspecified to < 0.15.1affected

References