Vulnerability in Ihji Pmake

CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.

Affected products

  • Ihji Pmake — versions 1.111
  • Netbsd — versions 1.0, 1.1, 1.2
  • N/a — versions n/a

Weakness classification (CWE)

References