SUSE CVE-2009-3736

🗓️ 15 Feb 2023 06:02:07Reported by Suse CVEType

susecve

susecve🔗 www.suse.com👁 2 Views

GNU Libtool vulnerability lets local users gain privileges by opening a Trojan horse .la file in the current directory.

Reporter	Title	Published	Views	Family All 230
FreeBSD	libtool -- Library Search Path Privilege Escalation Issue	25 Nov 200900:00	–	freebsd
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
OpenSUSE Tumbleweed	–	any	graphicsmagick	1.3.25-1.1	GraphicsMagick-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	graphicsmagick-devel	1.3.25-1.1	GraphicsMagick-devel-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	libgraphicsmagick++-q16-12	1.3.25-1.1	libGraphicsMagick++-Q16-12-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	libgraphicsmagick++-devel	1.3.25-1.1	libGraphicsMagick++-devel-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	libgraphicsmagick-q16-3	1.3.25-1.1	libGraphicsMagick-Q16-3-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	libgraphicsmagick3-config	1.3.25-1.1	libGraphicsMagick3-config-1.3.25-1.1.noarch.rpm
OpenSUSE Tumbleweed	–	any	libgraphicsmagickwand-q16-2	1.3.25-1.1	libGraphicsMagickWand-Q16-2-1.3.25-1.1.noarch.rpm
SUSE Linux Enterprise Server	11	any	libltdl7	2.2.6-2.131.1	libltdl7-2.2.6-2.131.1.noarch.rpm
SUSE Linux Enterprise Server	11.1	any	libltdl7	2.2.6-2.131.1	libltdl7-2.2.6-2.131.1.noarch.rpm
SUSE Linux Enterprise Server	11.2	any	libltdl7	2.2.6-2.131.1	libltdl7-2.2.6-2.131.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2009-3736
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/556122
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/IYUM4GTV6EWNUMSGBR3WQ4EJJEXTKNWB/

16 Mar 2026 00:49Current

7.1High risk

Vulners AI Score7.1

CVSS 26.9

EPSS0.00121

gnu libtool local privilege escalation trojan horse file current directory la file