Vulnerability in GNU Libtool
CVE-2009-3736
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.
Affected products
- Gnu Libtool — versions 1.5, 1.5.2, 1.5.4
- N/a — versions n/a
References
- cret@cert.org (vendor-advisory, x_refsource_GENTOO)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (vendor-advisory, x_refsource_FEDORA)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)