Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-3736

Опубликовано: 29 нояб. 2009
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:libtool:1.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.10:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.12:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.14:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.16:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.20:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.22:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.24:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:1.5.26:*:*:*:*:*:*:*
cpe:2.3:a:gnu:libtool:2.2.6a:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00097
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 15 лет назад

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

redhat
больше 15 лет назад

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

debian
больше 15 лет назад

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as us ...

github
около 3 лет назад

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

oracle-oval
больше 15 лет назад

ELSA-2010-0039: gcc and gcc4 security update (MODERATE)

EPSS

Процентиль: 28%
0.00097
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other