automake -- Insecure 'distcheck' recipe granted world-writable distdirentered 2012-08-06
no CVE referenced
CVE details
CVE-2012-3386
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
- Score
- 4.4 medium
- Published
- 2012-08-07
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.