Lucene search

[email protected]NVD:CVE-2009-4135

HistoryDec 11, 2009 - 4:30 p.m.

CVE-2009-4135

2009-12-1116:30:00

CWE-59

[email protected]

web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

High

EPSS

Percentile

10.1%

JSON

The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.

Affected configurations

Nvd

Node

canonicalubuntu_linuxMatch10.04lts

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

Node

gnucoreutilsMatch5.2.1

gnucoreutilsMatch5.91

gnucoreutilsMatch5.92

gnucoreutilsMatch5.93

gnucoreutilsMatch5.94

gnucoreutilsMatch5.95

gnucoreutilsMatch5.96

gnucoreutilsMatch5.97

gnucoreutilsMatch6.2

gnucoreutilsMatch6.3

gnucoreutilsMatch6.4

gnucoreutilsMatch6.5

gnucoreutilsMatch6.6

gnucoreutilsMatch6.7

gnucoreutilsMatch6.8

gnucoreutilsMatch6.9

gnucoreutilsMatch6.10

gnucoreutilsMatch6.11

gnucoreutilsMatch6.12

gnucoreutilsMatch7.1

gnucoreutilsMatch7.2

gnucoreutilsMatch7.3

gnucoreutilsMatch7.4

gnucoreutilsMatch7.5

gnucoreutilsMatch7.6

gnucoreutilsMatch8.1

Node

fedoraprojectfedoraMatch11

fedoraprojectfedoraMatch12

VendorProductVersionCPE
canonicalubuntu_linux10.04cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
gnucoreutils5.2.1cpe:2.3:a:gnu:coreutils:5.2.1:*:*:*:*:*:*:*
gnucoreutils5.91cpe:2.3:a:gnu:coreutils:5.91:*:*:*:*:*:*:*
gnucoreutils5.92cpe:2.3:a:gnu:coreutils:5.92:*:*:*:*:*:*:*
gnucoreutils5.93cpe:2.3:a:gnu:coreutils:5.93:*:*:*:*:*:*:*
gnucoreutils5.94cpe:2.3:a:gnu:coreutils:5.94:*:*:*:*:*:*:*
gnucoreutils5.95cpe:2.3:a:gnu:coreutils:5.95:*:*:*:*:*:*:*
gnucoreutils5.96cpe:2.3:a:gnu:coreutils:5.96:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
canonical	ubuntu_linux	10.04	cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts:::
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
gnu	coreutils	5.2.1	cpe:2.3:a:gnu:coreutils:5.2.1:::::::*
gnu	coreutils	5.91	cpe:2.3:a:gnu:coreutils:5.91:::::::*
gnu	coreutils	5.92	cpe:2.3:a:gnu:coreutils:5.92:::::::*
gnu	coreutils	5.93	cpe:2.3:a:gnu:coreutils:5.93:::::::*
gnu	coreutils	5.94	cpe:2.3:a:gnu:coreutils:5.94:::::::*
gnu	coreutils	5.95	cpe:2.3:a:gnu:coreutils:5.95:::::::*
gnu	coreutils	5.96	cpe:2.3:a:gnu:coreutils:5.96:::::::*