search

cknadler / vim-anywhere

Use Vim everywhere you've always wanted to
MIT License
3.67k stars 146 forks source link

Insecure use of /tmp #81

Open jwilk opened 6 years ago

jwilk commented 6 years ago

The way vim-anywhere uses /tmp is insecure. Malicious local user could create /tmp/vim-anywhere, make it writable to everyone, and then read or tamper with other users' files in this directory. In the worst case, when a victim uses vim-anywhere to create a shell script to be pasted to shell, they could end up with arbitrary code execution.

Please use mktemp -d for creating temporary directories.

timbaileyjones commented 11 months ago

The PR#4 for this issue was merged, but this ticket remains open.

Somebody wanna close it?

StefanSchroeder commented 1 week ago

For the record: This insecure use is captured in https://cwe.mitre.org/data/definitions/377.html