4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.7%
Automake is a tool for automatically generating Makefile.in files compliant
with the GNU Coding Standards.
Automake-generated Makefiles made certain directories world-writable when
preparing source archives, as was recommended by the GNU Coding Standards.
If a malicious, local user could access the directory where a victim was
creating distribution archives, they could use this flaw to modify the
files being added to those archives. Makefiles generated by these updated
automake packages no longer make distribution directories world-writable,
as recommended by the updated GNU Coding Standards. (CVE-2009-4029)
Note: This issue affected Makefile targets used by developers to prepare
distribution source archives. Those targets are not used when compiling
programs from the source code.
All users of automake, automake14, automake15, automake16, and automake17
should upgrade to these updated packages, which resolve this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 5 | noarch | automake16 | < 1.6.3-8.el5.1 | automake16-1.6.3-8.el5.1.noarch.rpm |
RedHat | 5 | noarch | automake | < 1.9.6-2.3.el5 | automake-1.9.6-2.3.el5.noarch.rpm |
RedHat | 5 | src | automake15 | < 1.5-16.el5.2 | automake15-1.5-16.el5.2.src.rpm |
RedHat | 5 | noarch | automake17 | < 1.7.9-7.el5.2 | automake17-1.7.9-7.el5.2.noarch.rpm |
RedHat | 5 | src | automake14 | < 1.4p6-13.el5.1 | automake14-1.4p6-13.el5.1.src.rpm |
RedHat | 5 | noarch | automake14 | < 1.4p6-13.el5.1 | automake14-1.4p6-13.el5.1.noarch.rpm |
RedHat | 5 | src | automake16 | < 1.6.3-8.el5.1 | automake16-1.6.3-8.el5.1.src.rpm |
RedHat | 5 | src | automake | < 1.9.6-2.3.el5 | automake-1.9.6-2.3.el5.src.rpm |
RedHat | 5 | src | automake17 | < 1.7.9-7.el5.2 | automake17-1.7.9-7.el5.2.src.rpm |
RedHat | 5 | noarch | automake15 | < 1.5-16.el5.2 | automake15-1.5-16.el5.2.noarch.rpm |