description: rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr.
problem types: Insecure (predictable) temporary file use
affected:
{
product: rpcbind
vendor: rpcbind
versions:
status: affected, version: 0.2.0
}