oss-sec mailing list archives

CVE id request: mktemp


From: Nico Golde <oss-security+ml () ngolde de>
Date: Fri, 15 Aug 2008 13:55:50 +0200

Hi,
mktemp (not the coreutils one) from 
ftp://ftp.mktemp.org/pub/mktemp/ is not generating fully 
random names. Steve, can you assign a CVE id to this?

This is 
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495193
I wrote an explanation on why this happens, available on:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495193#30

Kind regards
Nico

-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: _bin
Description:


Current thread: