Kurt Seifried of Red Hat Product Security reports:

There are several temporary file creation vulnerabilities:

In the file

./389-admin-1.1.36/admserv/newinst/src/AdminServer.pm.in

my $secfilebackupdir = "/tmp/adm-sec-files." . $$;

and in the file:

./389-admin-1.1.36/lib/libadmin/httpcon.c

char dbd = "/tmp/httptrace.%d";

The perl code should use mkstemp() and the C code should use mkstemp().

These issues are only locally exploitable and require administrative action in order to exploit.