FreeBSD, Inc. Information for VU#10277

Various shells create temporary files insecurely when using << operator

Status

Affected

Vendor Statement

http://www.linuxsecurity.com/advisories/freebsd_advisory-1054.html

http://www.linuxsecurity.com/advisories/freebsd_advisory-900.html

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

Third-party shells may be vulnerable -- consult vendor.

If you have feedback, comments, or additional information about this vulnerability, please send us email.