...
The open() function accepts a third argument to determine a newly created file's access mode.
If open() is used to create a new file and the third argument is omitted, the file may be created with unintended access permissions. This omission has been known to lead to vulnerabilities (for instance, CVE-2006-1174).
...