36 matches found
Moderate: Red Hat Security Advisory: libtool security update
Updated libtool packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Libtool is a set of shell scripts which automatically configure UNIX, Linux, an...
GNU Libtool libltdl库搜索路径本地权限提升漏洞
BUGTRAQ ID: 37128 CVE ID: CVE-2009-3736 GNU libtool是一个通用库支持脚本，将使用动态库的复杂性隐藏在统一、可移植的接口中。 GNU Libtool的libltdl库中的ltdl.c文件将当前工作目录用作了库的搜索路径，如果攻击者创建了恶意的共享对象或.la文件并诱骗用户使用同一目录中的libtool库执行应用程序，就会导致执行任意代码。 GNU libtool 2.2.6 GNU libtool 1.5.x 厂商补丁： GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2009-3736
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file...
CVE-2009-3736
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file...
CVE-2009-3736
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file...
Code injection
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file...
CVE-2009-3736
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file...
CVE-2009-3736
Mode C: CVE-2009-3736 affects GNU Libtool's libltdl (ltdl.c) in 1.5.x and 2.2.6 before 2.2.6b, where it opens a .la file in the CWD, enabling local privilege escalation via a Trojan horse file. Affected products include Ham Radio Control Libraries and Q; MiracleLinux advisories link this CVE to l...
FreeBSD : GNU libtool insecure temporary file handling (cacaffbc-5e64-11d8-80e3-0020ed76ef5a)
libtool attempts to create a temporary directory in which to write scratch files needed during processing. A malicious user may create a symlink and then manipulate the directory so as to write to files to which she normally has no permissions. This has been reported as a symlink vulnerability'',...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
CVE-2004-0256 affects GNU libtool and concerns versions prior to 1.5.2. During compilation, libtool directories created under /tmp can be tricked by a symlink, allowing a local user to overwrite arbitrary files. The documented impact is a local, user-level vulnerability with no remote access requ...
FreeBSD : GNU libtool insecure temporary file handling (95)
The following package needs to be updated: libtool %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcacaffbc5e6411d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
