ISOMAN

CVE

CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Severity
LOW
CVSS
3.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
NetBSD10.1 acorn32 installunknownsource
NetBSD10.1 alpha installunknownsource
NetBSD10.1 amd64 bios-installunknownsource
NetBSD10.1 amd64 installunknownsource
NetBSD10.1 amd64 liveunknownsource
NetBSD10.1 amiga installunknownsource
NetBSD10.1 arc installunknownsource
NetBSD10.1 atari installunknownsource
NetBSD10.1 cats installunknownsource
NetBSD10.1 cobalt installunknownsource
NetBSD10.1 dreamcast installunknownsource
NetBSD10.1 emips installunknownsource
NetBSD10.1 evbarm-aarch64 installunknownsource
NetBSD10.1 evbarm-aarch64eb installunknownsource
NetBSD10.1 evbmips-mips64eb installunknownsource
NetBSD10.1 evbmips-mips64el installunknownsource
NetBSD10.1 evbmips-mipseb installunknownsource
NetBSD10.1 evbmips-mipsel installunknownsource
NetBSD10.1 evbmips-mipsn64eb installunknownsource
NetBSD10.1 evbmips-mipsn64el installunknownsource
NetBSD10.1 evbppc installunknownsource
NetBSD10.1 evbsh3-sh3eb installunknownsource
NetBSD10.1 evbsh3-sh3el installunknownsource
NetBSD10.1 ews4800mips installunknownsource
NetBSD10.1 hp300 installunknownsource
NetBSD10.1 hpcarm installunknownsource
NetBSD10.1 hpcmips installunknownsource
NetBSD10.1 hpcsh installunknownsource
NetBSD10.1 hppa installunknownsource
NetBSD10.1 i386 installunknownsource
NetBSD10.1 ia64 installunknownsource
NetBSD10.1 ibmnws installunknownsource
NetBSD10.1 luna68k installunknownsource
NetBSD10.1 mac68k installunknownsource
NetBSD10.1 macppc installunknownsource
NetBSD10.1 mipsco installunknownsource
NetBSD10.1 mvme68k installunknownsource
NetBSD10.1 mvmeppc installunknownsource
NetBSD10.1 news68k installunknownsource
NetBSD10.1 newsmips installunknownsource
NetBSD10.1 next68k installunknownsource
NetBSD10.1 ofppc installunknownsource
NetBSD10.1 pmax installunknownsource
NetBSD10.1 prep installunknownsource
NetBSD10.1 sandpoint installunknownsource
NetBSD10.1 sgimips installunknownsource
NetBSD10.1 shark installunknownsource
NetBSD10.1 sparc installunknownsource
NetBSD10.1 sparc64 installunknownsource
NetBSD10.1 sun2 installunknownsource
NetBSD10.1 sun3 installunknownsource
NetBSD10.1 vax installunknownsource
NetBSD10.1 x68k installunknownsource
NetBSD10.1 zaurus installunknownsource
NetBSD10.1 amd64 boot-comunknownsource
NetBSD10.1 amd64 bootunknownsource
NetBSD10.1 i386 boot-comunknownsource
NetBSD10.1 i386 bootunknownsource

References

  1. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626673
  2. http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.lib.mk.diff?r1=1.239&r2=1.240&f=h
  3. http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.prog.mk.diff?r1=1.192&r2=1.193&f=h
  4. http://openwall.com/lists/oss-security/2011/05/16/2
  5. http://openwall.com/lists/oss-security/2011/05/16/8
  6. http://www.securityfocus.com/bid/47878
  7. https://bugzilla.redhat.com/show_bug.cgi?id=705090
  8. https://bugzilla.redhat.com/show_bug.cgi?id=705100
  9. https://exchange.xforce.ibmcloud.com/vulnerabilities/67495
  10. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626673
  11. http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.lib.mk.diff?r1=1.239&r2=1.240&f=h
  12. http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.prog.mk.diff?r1=1.192&r2=1.193&f=h
  13. http://openwall.com/lists/oss-security/2011/05/16/2
  14. http://openwall.com/lists/oss-security/2011/05/16/8
  15. http://www.securityfocus.com/bid/47878
  16. https://bugzilla.redhat.com/show_bug.cgi?id=705090
  17. https://bugzilla.redhat.com/show_bug.cgi?id=705100
  18. https://exchange.xforce.ibmcloud.com/vulnerabilities/67495