CVE-2011-4119

EUVD-2011-4067
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
inriacaml-light
𝑥
≤ 0.75
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://gnats.netbsd.org/45558
https://seclists.org/oss-sec/2011/q4/249
https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html
http://gnats.netbsd.org/45558
https://seclists.org/oss-sec/2011/q4/249
https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html