FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-suds -- vulnerable to symlink attacks

Affected packages
	py310-suds	<	1.0.0
	py311-suds	<	1.0.0
	py37-suds	<	1.0.0
	py38-suds	<	1.0.0
	py39-suds	<	1.0.0

Details

VuXML ID	b31f7029-817c-4c1f-b7d3-252de5283393
Discovery	2013-09-23
Entry	2023-04-09
Modified	2023-07-08

SUSE reports:

cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

[source]

References

CVE Name	CVE-2013-2217
URL	https://osv.dev/vulnerability/PYSEC-2013-32