Описание
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.111-3.1 |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| maverick | ignored | end of life |
| natty | ignored | end of life |
| oneiric | not-affected | 1.111-3.1 |
| precise | not-affected | 1.111-3.1 |
| quantal | not-affected | 1.111-3.1 |
| raring | not-affected | 1.111-3.1 |
| upstream | released | 1.111-3 |
Показывать по
Ссылки на источники
3.3 Low
CVSS2
Связанные уязвимости
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 ...
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.
3.3 Low
CVSS2