CVE-2012-3386
07.08.2012, 21:55
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gnu | automake | 𝑥 ≤ 1.11.5 |
| gnu | automake | 1.0 |
| gnu | automake | 1.2 |
| gnu | automake | 1.3 |
| gnu | automake | 1.4 |
| gnu | automake | 1.4:p1 |
| gnu | automake | 1.4:p2 |
| gnu | automake | 1.4:p3 |
| gnu | automake | 1.4:p4 |
| gnu | automake | 1.4:p5 |
| gnu | automake | 1.4:p6 |
| gnu | automake | 1.5 |
| gnu | automake | 1.6 |
| gnu | automake | 1.6.1 |
| gnu | automake | 1.6.2 |
| gnu | automake | 1.6.3 |
| gnu | automake | 1.7 |
| gnu | automake | 1.7.1 |
| gnu | automake | 1.7.2 |
| gnu | automake | 1.7.3 |
| gnu | automake | 1.7.4 |
| gnu | automake | 1.7.5 |
| gnu | automake | 1.7.6 |
| gnu | automake | 1.7.7 |
| gnu | automake | 1.7.8 |
| gnu | automake | 1.7.9 |
| gnu | automake | 1.8 |
| gnu | automake | 1.8.1 |
| gnu | automake | 1.8.2 |
| gnu | automake | 1.8.3 |
| gnu | automake | 1.8.4 |
| gnu | automake | 1.8.5 |
| gnu | automake | 1.9 |
| gnu | automake | 1.9.1 |
| gnu | automake | 1.9.2 |
| gnu | automake | 1.9.3 |
| gnu | automake | 1.9.4 |
| gnu | automake | 1.9.5 |
| gnu | automake | 1.9.6 |
| gnu | automake | 1.10 |
| gnu | automake | 1.10.0.3 |
| gnu | automake | 1.10.1 |
| gnu | automake | 1.10.2 |
| gnu | automake | 1.10.3 |
| gnu | automake | 1.11.1 |
| gnu | automake | 1.11.2 |
| gnu | automake | 1.11.3 |
| gnu | automake | 1.11.4 |
| gnu | automake | 1.12 |
| gnu | automake | 1.12.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References