VYPR
← All advisories
Moderate severityNVD Advisory· Published Sep 16, 2013· Updated Apr 29, 2026

CVE-2013-4260

CVE-2013-4260

Description

lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ansiblePyPI
>= 1.2, < 1.2.31.2.3

Affected products

3
  • Red Hat/Ansible3 versions
    cpe:2.3:a:redhat:ansible:1.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:ansible:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:ansible:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:ansible:1.2.2:*:*:*:*:*:*:*

Patches

1
d5948d59fc86

Place retry file in the user's home dir instead of /var/lib/tmp

https://github.com/ansible/ansibleJames CammarataAug 20, 2013via ghsa
commit
1 file changed · +1 −7
  • lib/ansible/playbook/__init__.py+1 −7 modified
    @@ -447,13 +447,7 @@ def generate_retry_inventory(self, replay_hosts):
         basedir = self.inventory.basedir()
         filename = "%s.retry" % os.path.basename(self.filename)
         filename = filename.replace(".yml","")
-
-        if not os.path.exists('/var/tmp/ansible'):
-            try:
-                os.makedirs('/var/tmp/ansible')
-            except:
-                pass
-        filename = os.path.join('/var/tmp/ansible', filename)
+        filename = os.path.join(os.path.expandvars('$HOME/'), filename)
 
         try:
             fd = open(filename, 'w')

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

9

News mentions

0

No linked articles in our index yet.