CVE-2012-5663 The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| textproc/isearch package | = before 1.47.01nb1 | No fix listed |
| OpenBSD textprocisearch | < 1.47.01nb1 | 1.47.01nb1 |
References
- security-tracker.debian.org third-party-advisory
- access.redhat.com broken-link
- www.openwall.com exploit mailing-list third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- gnats.netbsd.org mailing-list third-party-advisory