CVEvulnerability

CVE-2012-3386

4.4 MEDIUM Published 2012-08-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264, CWE-362

Description

The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.

Affected configurations

• gnu automake (<= 1.11.5) • gnu automake 1.0 • gnu automake 1.2 • gnu automake 1.3 • gnu automake 1.4 • gnu automake 1.5 • gnu automake 1.6 • gnu automake 1.6.1 • gnu automake 1.6.2 • gnu automake 1.6.3 • gnu automake 1.7 • gnu automake 1.7.1 • gnu automake 1.7.2 • gnu automake 1.7.3 • gnu automake 1.7.4 • gnu automake 1.7.5 • gnu automake 1.7.6 • gnu automake 1.7.7 • gnu automake 1.7.8 • gnu automake 1.7.9 • gnu automake 1.8 • gnu automake 1.8.1 • gnu automake 1.8.2 • gnu automake 1.8.3 • gnu automake 1.8.4 • gnu automake 1.8.5 • gnu automake 1.9 • gnu automake 1.9.1 • gnu automake 1.9.2 • gnu automake 1.9.3 • gnu automake 1.9.4 • gnu automake 1.9.5 • gnu automake 1.9.6 • gnu automake 1.10 • gnu automake 1.10.0.3 • gnu automake 1.10.1 • gnu automake 1.10.2 • gnu automake 1.10.3 • gnu automake 1.11.1 • gnu automake 1.11.2 • gnu automake 1.11.3 • gnu automake 1.11.4 • gnu automake 1.12 • gnu automake 1.12.1

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References