NVD

Id
44983  
Name
CVE-2012-3386  
Description
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2013-04-04  
Seq
2012-3386  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225394 44983 CVE-2012-3386 http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76  View
225395 44983 CVE-2012-3386 FEDORA-2012-14770  View
225396 44983 CVE-2012-3386 FEDORA-2012-14349  View
225397 44983 CVE-2012-3386 FEDORA-2012-14297  View
225398 44983 CVE-2012-3386 openSUSE-SU-2012:1519  View
225399 44983 CVE-2012-3386 RHSA-2013:0526  View
225400 44983 CVE-2012-3386 MDVSA-2012:103  View
225401 44983 CVE-2012-3386 [automake] 20120709 GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)  View
225402 44983 CVE-2012-3386 [automake] 20120709 GNU Automake 1.12.2 released (fixes a SECURITY VULNERABILITY!)  View
225403 44983 CVE-2012-3386 [automake] 20120709 CVE-2012-3386 Automake security fix for "make distcheck"  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27798 JVNDB-2012-003505 GNU Automake における任意のコードを実行される脆弱性 GNU Automake の "make distcheck" ルールには、展開したディレクトリに対して world-writable パーミッション (誰でも書き込み可能な権限) を付与するため、競合状態が生じることで、任意のコードを実行される脆弱性が存在します。 CVE-2012-3386 56624 CVE-2012-3386 44983 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003505.html 2012-07-09 2012-08-09 View