tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

- Fixed CVE-2014-1934.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This python-eyeD3 update fixes the following security issue :

  - bnc#863744: Fixed insecure use of temporary files     (CVE-2014-1934).

This python-eyeD3 fixes the following security issue.

  - bnc#863744: Fixed insecure use of temporary files     (CVE-2014-1934).

ID	Name	Product	Family	Severity
79773	Fedora 21 : python-eyed3-0.7.4-4.fc21 (2014-15450)	Nessus	Fedora Local Security Checks	low
79650	Fedora 19 : python-eyed3-0.7.4-4.fc19 (2014-15477)	Nessus	Fedora Local Security Checks	low
79649	Fedora 20 : python-eyed3-0.7.4-4.fc20 (2014-15464)	Nessus	Fedora Local Security Checks	low
75351	openSUSE Security Update : python-eyeD3 (openSUSE-SU-2014:0619-1)	Nessus	SuSE Local Security Checks	low
75350	openSUSE Security Update : python-eyeD3 (openSUSE-SU-2014:0620-1)	Nessus	SuSE Local Security Checks	low

Detections

Analytics

CVE-2014-1934

medium

Tenable Plugins

low

low

low

low

low