The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
2012-08-07T21:55:01.420
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.4 (MEDIUM)
AV:L/AC:M/Au:N/C:P/I:P/A:P
3.4
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | gnu | automake | ≤ 1.11.5 | Yes |
Application | gnu | automake | 1.0 | Yes |
Application | gnu | automake | 1.2 | Yes |
Application | gnu | automake | 1.3 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.4 | Yes |
Application | gnu | automake | 1.5 | Yes |
Application | gnu | automake | 1.6 | Yes |
Application | gnu | automake | 1.6.1 | Yes |
Application | gnu | automake | 1.6.2 | Yes |
Application | gnu | automake | 1.6.3 | Yes |
Application | gnu | automake | 1.7 | Yes |
Application | gnu | automake | 1.7.1 | Yes |
Application | gnu | automake | 1.7.2 | Yes |
Application | gnu | automake | 1.7.3 | Yes |
Application | gnu | automake | 1.7.4 | Yes |
Application | gnu | automake | 1.7.5 | Yes |
Application | gnu | automake | 1.7.6 | Yes |
Application | gnu | automake | 1.7.7 | Yes |
Application | gnu | automake | 1.7.8 | Yes |
Application | gnu | automake | 1.7.9 | Yes |
Application | gnu | automake | 1.8 | Yes |
Application | gnu | automake | 1.8.1 | Yes |
Application | gnu | automake | 1.8.2 | Yes |
Application | gnu | automake | 1.8.3 | Yes |
Application | gnu | automake | 1.8.4 | Yes |
Application | gnu | automake | 1.8.5 | Yes |
Application | gnu | automake | 1.9 | Yes |
Application | gnu | automake | 1.9.1 | Yes |
Application | gnu | automake | 1.9.2 | Yes |
Application | gnu | automake | 1.9.3 | Yes |
Application | gnu | automake | 1.9.4 | Yes |
Application | gnu | automake | 1.9.5 | Yes |
Application | gnu | automake | 1.9.6 | Yes |
Application | gnu | automake | 1.10 | Yes |
Application | gnu | automake | 1.10.0.3 | Yes |
Application | gnu | automake | 1.10.1 | Yes |
Application | gnu | automake | 1.10.2 | Yes |
Application | gnu | automake | 1.10.3 | Yes |
Application | gnu | automake | 1.11.1 | Yes |
Application | gnu | automake | 1.11.2 | Yes |
Application | gnu | automake | 1.11.3 | Yes |
Application | gnu | automake | 1.11.4 | Yes |
Application | gnu | automake | 1.12 | Yes |
Application | gnu | automake | 1.12.1 | Yes |