CVE-2011-4944
EPSS 0.03%Published: 8/27/2012Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-4944
Description
Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.
Affected packages (1)
- Debian/python2.7from 0, < 2.7.3~rc2-2