CVE-2011-4119 caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inria caml-light | <= 0.75 | No fix listed |
References
- gnats.netbsd.org exploit patch third-party-advisory
- seclists.org exploit mailing-list patch third-party-advisory
- vuxml.freebsd.org third-party-advisory