NVD

Id
50919  
Name
CVE-2009-3736  
Description
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2016-12-07  
Seq
2009-3736  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257866 50919 CVE-2009-3736 ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz  View
257867 50919 CVE-2009-3736 http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec  View
257868 50919 CVE-2009-3736 http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup  View
257869 50919 CVE-2009-3736 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
257870 50919 CVE-2009-3736 FEDORA-2010-1872  View
257871 50919 CVE-2009-3736 FEDORA-2010-1924  View
257872 50919 CVE-2009-3736 FEDORA-2011-1990  View
257873 50919 CVE-2009-3736 FEDORA-2011-1958  View
257874 50919 CVE-2009-3736 FEDORA-2011-1967  View
257875 50919 CVE-2009-3736 [libtool] 20091116 GNU Libtool 2.2.6b released  View
257876 50919 CVE-2009-3736 [libtool] 20091116 Backport of libltdl changes to branch-1-5  View
257877 50919 CVE-2009-3736 SUSE-SR:2010:006  View
257878 50919 CVE-2009-3736 oval:org.mitre.oval:def:11687  View
257879 50919 CVE-2009-3736 oval:org.mitre.oval:def:6951  View
257880 50919 CVE-2009-3736 GLSA-201311-10  View
257881 50919 CVE-2009-3736 http://support.avaya.com/css/P8/documents/100074869  View
257882 50919 CVE-2009-3736 MDVSA-2009:307  View
257883 50919 CVE-2009-3736 MDVSA-2010:035  View
257884 50919 CVE-2009-3736 MDVSA-2010:091  View
257885 50919 CVE-2009-3736 MDVSA-2010:105  View
257886 50919 CVE-2009-3736 RHSA-2010:0039  View
257887 50919 CVE-2009-3736 37128  View
257888 50919 CVE-2009-3736 ADV-2011-0574  View
257889 50919 CVE-2009-3736 https://bugzilla.redhat.com/show_bug.cgi?id=537941  View
257890 50919 CVE-2009-3736 RHSA-2010:0095  View
257891 50919 CVE-2009-3736 FEDORA-2009-12813  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41440 JVNDB-2009-002447 GNU Libtool の libltdl における権限昇格の脆弱性 GNU Libtool の libltdl には、カレントの作業ディレクトリの .la ファイルを開こうとするため、権限昇格の脆弱性が存在します。 CVE-2009-3736 41167 CVE-2009-3736 50919 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002447.html 2009-11-16 2010-12-15 View