Описание
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
automake | fixed | 1:1.4-p6-13.1 | package | |
automake1.10 | fixed | 1:1.10.3-3 | package | |
automake1.10 | fixed | 1:1.10.3-1+squeeze1 | squeeze | package |
automake1.11 | fixed | 1:1.11.6-1 | package | |
automake1.11 | fixed | 1:1.11.1-1+squeeze1 | squeeze | package |
automake1.7 | fixed | 1.7.9-10 | package | |
automake1.7 | fixed | 1.7.9-9.1+squeeze1 | squeeze | package |
automake1.9 | fixed | 1.9.6+nogfdl-4 | package | |
automake1.9 | fixed | 1.9.6+nogfdl-3.1+squeeze1 | squeeze | package |
Связанные уязвимости
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.