Directory Permissions Vulnerability in GNU Automake by the Free Software Foundation
CVE-2009-4029

Currently unrated

Key Information:

Vendor
Gnu
Status
Automake
Vendor
CVE Published:
20 December 2009

Summary

The dist and distcheck rules in GNU Automake allow for the creation of distribution tarballs with directories set to insecure permissions (777). This vulnerability exposes build directories, potentially permitting local users to manipulate package file contents, insert malicious code, or execute unauthorized operations during the build process.

References

http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://lists.gnu.org/archive/html/automake/2009-12/msg000...
mailing-listx_refsource_MLIST
http://lists.gnu.org/archive/html/automake-patches/2009-1...
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.