critical9.8
CVE-2011-4119
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
Impact
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inria | Caml-Light | through 0.75 |
Weakness classification
References
- NVD record
- CVE.org record
- http://gnats.netbsd.org/45558
- https://seclists.org/oss-sec/2011/q4/249
- https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html
- http://gnats.netbsd.org/45558
- https://seclists.org/oss-sec/2011/q4/249
- https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html