tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify     arbitrary files via a symlink attack on a temporary file. (CVE-2014-1934)

Note that Nessus relies on the presence of the package as reported by the vendor.

- Fixed CVE-2014-1934.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This python-eyeD3 update fixes the following security issue :

  - bnc#863744: Fixed insecure use of temporary files     (CVE-2014-1934).

This python-eyeD3 fixes the following security issue.

  - bnc#863744: Fixed insecure use of temporary files     (CVE-2014-1934).

ID	Name	Product	Family	Severity
253839	Linux Distros Unpatched Vulnerability : CVE-2014-1934	Nessus	Misc.	medium
79773	Fedora 21 : python-eyed3-0.7.4-4.fc21 (2014-15450)	Nessus	Fedora Local Security Checks	low
79650	Fedora 19 : python-eyed3-0.7.4-4.fc19 (2014-15477)	Nessus	Fedora Local Security Checks	low
79649	Fedora 20 : python-eyed3-0.7.4-4.fc20 (2014-15464)	Nessus	Fedora Local Security Checks	low
75351	openSUSE Security Update : python-eyeD3 (openSUSE-SU-2014:0619-1)	Nessus	SuSE Local Security Checks	low
75350	openSUSE Security Update : python-eyeD3 (openSUSE-SU-2014:0620-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2014-1934

medium

Tenable Plugins

medium

low

low

low

low

low