The (1) maketemp and (2) mkstemp builtin functions in GNU...

Vulnerability Description

The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename.

References

• http://www.vupen.com/english/advisories/2008/1151/references
• http://www.securityfocus.com/bid/28688
• http://www.openwall.com/lists/oss-security/2008/04/07/12
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41706
• http://secunia.com/advisories/29671
• http://www.openwall.com/lists/oss-security/2008/04/07/3
• http://www.openwall.com/lists/oss-security/2008/04/07/4
• http://secunia.com/advisories/29729
• http://www.openwall.com/lists/oss-security/2008/04/07/1
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612