CVE-2014-1838: logilab-common - Arbitrary File Overwrite Vulnerability
Summary
CVE-2014-1838: The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /... Affects logilab-common versions < 0.60.1. Fixed in 0.60.1. How to fix ↓
Also tracked for
- logilab-common · Debian:11
The same CVE-2014-1838 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
logilab-common is a Python package that provides various utility functions and classes for common programming tasks. It is commonly used in Python projects for tasks such as file manipulation, data processing, and logging. The package is available on PyPI and can be installed using pip. The vulnerability described here affects logilab-common versions prior to 0.61.0.
Vulnerability Detail
The vulnerability exists in two functions, extract_keys_from_pdf and fill_pdf, in the pdf_ext.py module of logilab-common. These functions are susceptible to a symlink attack on the /tmp/toto.fdf file. A local user can exploit this vulnerability to overwrite arbitrary files on the system, potentially leading to unauthorized access, data loss, or other unspecified impacts.
How To Fix
Minimum fixed version
0.60.1
This is the first release that contains the fix.
pip install --upgrade "logilab-common==0.60.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading logilab-common is not immediately feasible, users can mitigate the risk by ensuring that the /tmp directory is properly secured and restricting access to it. Additionally, users should avoid running the affected functions in an environment where untrusted users have write access to the /tmp directory.
Conclusion
The logilab-common package prior to version 0.61.0 is vulnerable to an arbitrary file overwrite vulnerability. This can be exploited by a local user to overwrite files on the system, potentially leading to unauthorized access or data loss. It is recommended to upgrade logilab-common to version 0.61.0 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for logilab-common →
FAQ
logilab-common is a Python package that provides utility functions and classes for common programming tasks.
Versions of logilab-common prior to 0.61.0 are affected by this vulnerability.
A symlink attack, also known as a symbolic link attack, is a security vulnerability that occurs when a malicious user creates a symbolic link to a sensitive file or directory. By exploiting this vulnerability, the attacker can manipulate the target of the symlink and potentially gain unauthorized access or cause unintended actions.
This vulnerability allows a local user to overwrite arbitrary files on the system. The impact of this can vary depending on the specific files overwritten, but it could lead to unauthorized access, data loss, or other unspecified consequences.
To update logilab-common to the fixed version (0.61.0 or later), you can use the following command: pip install --upgrade logilab-common
Related vulnerabilities
Recent vulnerabilities recorded for logilab-common.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
