Secure testing team - Nov 2010 - Bug#605419: gnash: configure creates temp files insecurely

Source: gnash
Version: 0.8.8-5
Tags: security

The configure script creates temporary files in an insecure way:

$ grep -A 7 ''$$'' gnash-0.8.8/configure
cerr=/tmp/gnash-configure-errors.$$
cwarn=/tmp/gnash-configure-warnings.$$
crec=/tmp/gnash-configure-recommended.$$
echo ""

#trap ''rm cerr'' 0 # trap isn''t a good idea, might
override other traps
exec 3> $cerr
exec 4> $cwarn
exec 5> $crec


-- 
Jakub Wilk