pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pip | Pypa | * | 1.3 (excluding) |
| Python-pip | Ubuntu | lucid | * |
| Python-pip | Ubuntu | oneiric | * |
| Python-pip | Ubuntu | precise | * |
| Python-pip | Ubuntu | quantal | * |
| Python-pip | Ubuntu | upstream | * |