MIPSPro Compiler Predictable Temp File Creation

2000-06-21T16:18:15
ID OSVDB:2176
Type osvdb
Reporter OSVDB
Modified 2000-06-21T16:18:15

Description

Vulnerability Description

MIPSPro Compiler creates predictable temporary files with the permissions of the user running the compiler. A malicious user can modify the contents of the temporary files and they will be executed as the user running the compiler.

Solution Description

Currently, there is no known patch or workaround for this vulnerability.

Short Description

MIPSPro Compiler creates predictable temporary files with the permissions of the user running the compiler. A malicious user can modify the contents of the temporary files and they will be executed as the user running the compiler.

References:

Vendor Specific Advisory URL ISS X-Force ID: 5007 CVE-2000-0578 Bugtraq ID: 1412