Lucene search

RedhatCVE-2011-1920

HistoryMay 23, 2011 - 10:55 p.m.

CVE-2011-1920

2011-05-2322:55:01

CWE-59

redhat

web.nvd.nist.gov

netbsd

pmake

symlink attack

file overwrite

vulnerability

cve-2011-1920

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

Percentile

9.8%

JSON

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Affected configurations

Nvd

Node

netbsdnetbsd

netbsdnetbsdRange≤1.6.1

netbsdnetbsdMatch1.0

netbsdnetbsdMatch1.1

netbsdnetbsdMatch1.2

netbsdnetbsdMatch1.2.1

netbsdnetbsdMatch1.3

netbsdnetbsdMatch1.3.1

netbsdnetbsdMatch1.3.2

netbsdnetbsdMatch1.3.3

netbsdnetbsdMatch1.4

netbsdnetbsdMatch1.4.1

netbsdnetbsdMatch1.4.2

netbsdnetbsdMatch1.4.3

netbsdnetbsdMatch1.5

netbsdnetbsdMatch1.5.1

netbsdnetbsdMatch1.5.2

netbsdnetbsdMatch1.5.3

netbsdnetbsdMatch1.6

AND

ihjipmakeMatch1.111

VendorProductVersionCPE
netbsdnetbsd*cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*
netbsdnetbsd1.0cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*
netbsdnetbsd1.1cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*
netbsdnetbsd1.2cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*
netbsdnetbsd1.2.1cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*
netbsdnetbsd1.3cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*
netbsdnetbsd1.3.1cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*
netbsdnetbsd1.3.2cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*
netbsdnetbsd1.3.3cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*
netbsdnetbsd1.4cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netbsd	netbsd	*	cpe:2.3:o:netbsd:netbsd::::::::
netbsd	netbsd	1.0	cpe:2.3:o:netbsd:netbsd:1.0:::::::*
netbsd	netbsd	1.1	cpe:2.3:o:netbsd:netbsd:1.1:::::::*
netbsd	netbsd	1.2	cpe:2.3:o:netbsd:netbsd:1.2:::::::*
netbsd	netbsd	1.2.1	cpe:2.3:o:netbsd:netbsd:1.2.1:::::::*
netbsd	netbsd	1.3	cpe:2.3:o:netbsd:netbsd:1.3:::::::*
netbsd	netbsd	1.3.1	cpe:2.3:o:netbsd:netbsd:1.3.1:::::::*
netbsd	netbsd	1.3.2	cpe:2.3:o:netbsd:netbsd:1.3.2:::::::*
netbsd	netbsd	1.3.3	cpe:2.3:o:netbsd:netbsd:1.3.3:::::::*
netbsd	netbsd	1.4	cpe:2.3:o:netbsd:netbsd:1.4:::::::*