Local File Inclusion Vulnerability in GNU Libtool Affecting Ham Radio Control Libraries and Others

CVE-2009-3736

Summary

A security vulnerability exists in the GNU Libtool library that can be exploited by local users. It arises from the library's attempt to open .la files located in the current working directory without proper validation. This lack of validation could permit a local user to introduce a specially crafted .la file, which, when executed, may escalate privileges via a Trojan horse file, compromising system integrity and security.

References