The "make distcheck" rule in GNU Automake prior to 1.11.6 and 1.12.x prior to 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gnu automake 1.5 |
||
gnu automake 1.10.1 |
||
gnu automake 1.4 |
||
gnu automake 1.10 |
||
gnu automake 1.7.8 |
||
gnu automake 1.9.2 |
||
gnu automake 1.8 |
||
gnu automake 1.11.1 |
||
gnu automake 1.3 |
||
gnu automake |
||
gnu automake 1.6 |
||
gnu automake 1.6.1 |
||
gnu automake 1.11.4 |
||
gnu automake 1.2 |
||
gnu automake 1.10.0.3 |
||
gnu automake 1.7.5 |
||
gnu automake 1.7.6 |
||
gnu automake 1.6.2 |
||
gnu automake 1.7 |
||
gnu automake 1.7.3 |
||
gnu automake 1.9.6 |
||
gnu automake 1.11.3 |
||
gnu automake 1.10.2 |
||
gnu automake 1.8.2 |
||
gnu automake 1.9.5 |
||
gnu automake 1.8.5 |
||
gnu automake 1.8.3 |
||
gnu automake 1.7.1 |
||
gnu automake 1.11.2 |
||
gnu automake 1.9 |
||
gnu automake 1.9.1 |
||
gnu automake 1.7.4 |
||
gnu automake 1.7.7 |
||
gnu automake 1.12.1 |
||
gnu automake 1.7.2 |
||
gnu automake 1.9.3 |
||
gnu automake 1.0 |
||
gnu automake 1.12 |
||
gnu automake 1.6.3 |
||
gnu automake 1.10.3 |
||
gnu automake 1.9.4 |
||
gnu automake 1.8.1 |
||
gnu automake 1.8.4 |
||
gnu automake 1.7.9 |