CVE Catalog
CVE-2015-5224
CriticalSummary
The mkostemp function in login-utils in util-linux, when used incorrectly, allows remote attackers to cause file name collision and possibly other attacks.
Risk Assessment
Attackers may exploit this vulnerability to gain control over the system by manipulating file names, potentially leading to unauthorized access to data.
Recommendation
It is recommended to review and improve the usage of the mkostemp function in applications using login-utils to prevent file name collisions.
Original NVD description (English source)
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.