CVE-2011-4944

CVE-2011-4944 describes a race condition in Python versions 2.6 through 3.2 where the ~/.pypirc file is temporarily created with world-readable permissions. This vulnerability allows local attackers to read the file and obtain sensitive username and password information before its permissions are correctly set. The CVSS score of 1.9 indicates low severity, with an attack vector requiring local access and medium attack complexity, leading to a potential compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.