CVE-2011-4119

caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2021-10-26

Last modified

2024-08-07

Weaknesses

CWE-377

Affected products

• Caml-light (Inria)

References

• http://gnats.netbsd.org/45558
• https://seclists.org/oss-sec/2011/q4/249
• https://vuxml.freebsd.org/freebsd/9dde9dac-08f4-11e1-af36-003067b2972c.html