CVE-2012-2666

Name of the Vulnerable Software and Affected Versions golang/go versions prior to 1.0.2

Description The issue arises from the dotest() function in src/pkg/debug/gosym/pclntab test.go, which creates a temporary file with a predictable name and executes it as a shell script. This behavior poses a risk, especially on shared machines.

Recommendations For versions prior to 1.0.2, update to version 1.0.2 to resolve the issue. As a temporary workaround, consider restricting access to the dotest() function in src/pkg/debug/gosym/pclntab test.go until the update is applied.