Unscored CVE-2012-5663 EUVD-2012-5546GHSA-43vc-pv65-hrhm

The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-wri…

Published Dec 30, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: textproc/isearch package Product: textproc/isearch package

Description

The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).

Affected products

Vendor	Product	Affected	Fixed
textproc/isearch package	textproc/isearch package	before 1.47.01nb1	—

References

https://security-tracker.debian.org/tracker/CVE-2012-5663
https://access.redhat.com/security/cve/cve-2012-5663
http://www.openwall.com/lists/oss-security/2012/12/21/2
http://www.openwall.com/lists/oss-security/2012/12/21/3
http://gnats.netbsd.org/47360