CVEvulnerability

CVE-2009-3736

6.9 MEDIUM Published 2009-11-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.

Affected configurations

• gnu libtool 1.5 • gnu libtool 1.5.2 • gnu libtool 1.5.4 • gnu libtool 1.5.6 • gnu libtool 1.5.8 • gnu libtool 1.5.10 • gnu libtool 1.5.12 • gnu libtool 1.5.14 • gnu libtool 1.5.16 • gnu libtool 1.5.18 • gnu libtool 1.5.20 • gnu libtool 1.5.22 • gnu libtool 1.5.24 • gnu libtool 1.5.26 • gnu libtool 2.2.6a

References