CVE-2009-4135
First published: Mon Dec 07 2009(Updated: )
The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =10.04 | |
| GNU coreutils | =6.6 | |
| GNU coreutils | =6.10 | |
| GNU coreutils | =5.96 | |
| GNU coreutils | =5.91 | |
| GNU coreutils | =6.4 | |
| GNU coreutils | =6.12 | |
| GNU coreutils | =5.2.1 | |
| GNU coreutils | =7.6 | |
| GNU coreutils | =6.8 | |
| GNU coreutils | =6.7 | |
| GNU coreutils | =8.1 | |
| GNU coreutils | =7.1 | |
| GNU coreutils | =6.11 | |
| GNU coreutils | =7.3 | |
| GNU coreutils | =7.4 | |
| GNU coreutils | =5.97 | |
| GNU coreutils | =5.94 | |
| GNU coreutils | =5.93 | |
| GNU coreutils | =6.5 | |
| GNU coreutils | =6.9 | |
| GNU coreutils | =6.2 | |
| GNU coreutils | =5.95 | |
| GNU coreutils | =7.2 | |
| GNU coreutils | =7.5 | |
| GNU coreutils | =5.92 | |
| GNU coreutils | =6.3 | |
| Fedoraproject Fedora | =11 | |
| Fedoraproject Fedora | =12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=oss-security&m=126030454503441&w=2
- http://www.osvdb.org/60853
- https://bugzilla.redhat.com/show_bug.cgi?id=545439
- http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5
- http://www.securityfocus.com/bid/37256
- http://secunia.com/advisories/37645
- http://www.vupen.com/english/advisories/2009/3453
- http://www.openwall.com/lists/oss-security/2009/12/08/4
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00954.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00972.html
- http://secunia.com/advisories/37860
- http://secunia.com/advisories/62226
- http://www.ubuntu.com/usn/USN-2473-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54673
- http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18787.html
- http://www.mail-archive.com/bug-coreutils%40gnu.org/msg18779.html
- https://access.redhat.com/security/cve/CVE-2009-4135
- http://admin.fedoraproject.org/updates/coreutils-7.6-8.fc12
- http://admin.fedoraproject.org/updates/coreutils-7.2-5.fc11
- http://www.redhat.com/security/updates/classification/
- https://www.cve.org/CVERecord?id=CVE-2009-4135 https://nvd.nist.gov/vuln/detail/CVE-2009-4135
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4135.json
- collector/nvd-historical
- collector/nvd-index
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-4135
- collector/redhat-cve
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/references
- agent/remedy
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/10.04
- vendor/gnu
- canonical/gnu coreutils
- version/gnu coreutils/6.6
- version/gnu coreutils/6.10
- version/gnu coreutils/5.96
- version/gnu coreutils/5.91
- version/gnu coreutils/6.4
- version/gnu coreutils/6.12
- version/gnu coreutils/5.2.1
- version/gnu coreutils/7.6
- version/gnu coreutils/6.8
- version/gnu coreutils/6.7
- version/gnu coreutils/8.1
- version/gnu coreutils/7.1
- version/gnu coreutils/6.11
- version/gnu coreutils/7.3
- version/gnu coreutils/7.4
- version/gnu coreutils/5.97
- version/gnu coreutils/5.94
- version/gnu coreutils/5.93
- version/gnu coreutils/6.5
- version/gnu coreutils/6.9
- version/gnu coreutils/6.2
- version/gnu coreutils/5.95
- version/gnu coreutils/7.2
- version/gnu coreutils/7.5
- version/gnu coreutils/5.92
- version/gnu coreutils/6.3
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/11
- version/fedoraproject fedora/12