NVD

Id
51281  
Name
CVE-2009-4135  
Description
The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-11  
Modified Date
2016-09-07  
Seq
2009-4135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260076 51281 CVE-2009-4135 http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5  View
260077 51281 CVE-2009-4135 [oss-security] 20091208 Re: CVE Request -- coreutils -- unsafe temporary directory location use  View
260078 51281 CVE-2009-4135 [bug-coreutils] 20091208 Re: build: distcheck: do not leave a $TMPDIR/coreutils directory behind  View
260079 51281 CVE-2009-4135 [bug-coreutils] 20091209 [PATCH] doc: NEWS: mention the "make distcheck" vulnerability  View
260080 51281 CVE-2009-4135 [oss-security] 20091208 CVE Request -- coreutils -- unsafe temporary directory location use  View
260081 51281 CVE-2009-4135 37256  View
260082 51281 CVE-2009-4135 USN-2473-1  View
260083 51281 CVE-2009-4135 ADV-2009-3453  View
260084 51281 CVE-2009-4135 gnu-core-distcheck-symlink(54673)  View
260085 51281 CVE-2009-4135 https://bugzilla.redhat.com/show_bug.cgi?id=545439  View
260086 51281 CVE-2009-4135 FEDORA-2009-13216  View
260087 51281 CVE-2009-4135 FEDORA-2009-13181  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42931 JVNDB-2009-003938 GNU coreutils の dist-check.mk の distcheck rule における権限を取得される脆弱性 GNU coreutils の dist-check.mk の distcheck rule には、権限を取得される脆弱性が存在します。 CVE-2009-4135 41566 CVE-2009-4135 51281 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003938.html 2009-12-05 2012-06-26 View