Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-4029

The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.4%
CVSS Severity
CVSS v2 Score 4.4
References
Products affected by CVE-2009-4029
  • Gnu » Automake » Version: 1.10.3
    cpe:2.3:a:gnu:automake:1.10.3
  • Gnu » Automake » Version: 1.11.1
    cpe:2.3:a:gnu:automake:1.11.1
  • Gnu » Automake » Version: branch
    cpe:2.3:a:gnu:automake:branch


Contact Us

Shodan ® - All rights reserved