Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2010-4817

Disclosure Date: November 13, 2019 (last updated November 27, 2024)
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Attack Vector: LocalPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2011-1500

Disclosure Date: April 13, 2011 (last updated October 04, 2023)
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file.
0
0