{"id":"CVE-2013-4260","aliases":["EUVD-2013-0002","GHSA-pcqv-c46v-2p4v","PYSEC-2013-2","UBUNTU-CVE-2013-4260"],"status":"published","title":"Ansible Arbitrary File Overwrite Vulnerability","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","severity":{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00329,"percentile":0.26244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264","CWE-281"],"published":"2013-09-16T19:00:00Z","modified":"2026-06-16T23:56:54Z","fixes":[{"ecosystem":"PyPI","package":"ansible","fixed_in":["1.2.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2"},{"fixed":"1.2.3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2"},{"fixed":"1.2.3"}]}],"versions":["1.2","1.2.1","1.2.2"]},{"source":"osv","ecosystem":"PyPI","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.3"}]}],"versions":["1.2","1.2.1","1.2.2"]}],"products":[{"vendor":"redhat","product":"ansible"}],"references":[{"url":"https://groups.google.com/forum/#%21topic/ansible-project/UVDYW0HGcNg","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=998227","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","web","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/86898","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory","web"]},{"url":"http://www.ansible.com/security","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4260","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/ansible-project/UVDYW0HGcNg","tags":["web","report"]},{"url":"https://github.com/ansible/ansible/commit/d5948d59fc863fcec6efa62fa2791928ffc5a6d1","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2013-2.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-pcqv-c46v-2p4v","tags":["advisory"]},{"url":"https://github.com/ansible/ansible","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2013-4260","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4260","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-4260","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","status":"published","published":"2013-09-16T19:00:00Z","modified":"2024-08-06T16:38:01.716Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-0002","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","status":"published","published":"2013-09-16T19:00:00Z","modified":"2024-08-06T16:38:01Z","updated_at":"2026-11-03T01:56:33.227006Z"}],"ghsa":[{"id":"GHSA-pcqv-c46v-2p4v","title":"Ansible Arbitrary File Overwrite Vulnerability","description":"`lib/ansible/playbook/__init__.py` in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in `/var/tmp/ansible/`.","status":"published","published":"2022-05-14T02:03:36Z","modified":"2024-09-04T19:50:20Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:38:01.080229Z"}],"nvd":[{"id":"CVE-2013-4260","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","status":"published","published":"2013-09-16T19:14:39.117Z","modified":"2026-06-16T23:56:54.673Z","cvss":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:35.248411Z"}],"osv":[{"id":"GHSA-pcqv-c46v-2p4v","title":"Ansible Arbitrary File Overwrite Vulnerability","description":"`lib/ansible/playbook/__init__.py` in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in `/var/tmp/ansible/`.","status":"published","published":"2022-05-14T02:03:36Z","modified":"2024-09-04T20:04:43.040426Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T15:46:52.891208Z"},{"id":"PYSEC-2013-2","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","status":"published","published":"2013-09-16T19:14:00Z","modified":"2026-06-10T17:00:16.098839559Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"UBUNTU-CVE-2013-4260","description":"lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.","status":"withdrawn","published":"2013-09-16T19:14:00Z","modified":"2025-07-16T07:17:08.530488Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}