OpenShift: install script has temporary file creation vulnerability

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution

openshift-origin-msg-node-mcollective: /etc/cron.minutely/openshift-facts tmp file creation

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.

Server: Malicious change set import due to insecure temporary file usage

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.

vdsm: /tmp file vulnerability issues

Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

Monkey HTTP Daemon has local security bypass

cartridge: predictable /tmp in set-proxy connection hook

OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS

python-docutils allows insecure usage of temporary files

gri before 2.12.18 generates temporary files in an insecure way.

kernel: mounting proc readonly on a different mount point silently mounts it rw if the /proc mount is rw

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.

Mondo 2.24 has insecure handling of temporary files.

mutt: denial of service via a series of requests to temporary files

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.