CVE:CVE-2017-6512
CNNVD:CNNVD-201703-198
File-Path是一个用来创建和移除目录树的模块。
File-Path模块2.13之前的版本中的‘remove_tree’和‘rmtree’函数存在竞争条件漏洞。攻击者可利用该漏洞设置任意文件的模式。
solution:Upgrade file  to a higher version than path_project:file,and avoid the version path_project:file; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0