Description (CNA)
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / caml-light | affected caml-light <= 0.75 |
CWE
CWE-377
References
- https://seclists.org/oss-sec/2011/q4/249
- https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html
- http://gnats.netbsd.org/45558
ADP enrichment
No English description supplied.