DerScanner
Home / Vulnerability Database / C or C++ : Unsafe function: mktemp
C/C++

C or C++ : Unsafe function: mktemp

Classification

CWE
CWE-377

Overview

Creating and using insecure temporary files can leave application and system data vulnerable to attacks.

Applications require temporary files so frequently that many different mechanisms exist for creating them in the C Library and Windows® API. Most of these functions are vulnerable to various forms of attacks.

References

  1. OWASP: Insecure Temporary File
  2. CWE-377
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Unsafe function: mktemp in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized