psub and funced don't protect tempfiles (CVE-2014-2906 and CVE-2014-3856)

[zanchey]

psub and funced both create temporary files using reasonably predictable names and are vulnerable to a race condition.

For funced, the file is sourced directly, allowing privilege escalation (CVE-2014-3856).

For psub, the file is given as an argument to other programs, allowing incorrect input to these programs (CVE-2014-2906).