CVE-2011-4119

caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
inriacaml-light
𝑥
≤ 0.75
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://gnats.netbsd.org/45558
https://seclists.org/oss-sec/2011/q4/249
https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html
http://gnats.netbsd.org/45558
https://seclists.org/oss-sec/2011/q4/249
https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html