CVE-2009-3736
- State
- Published
- Severity
- Not scored
- Published
- Nov 27, 2009
- Updated
- Aug 7, 2024
- Reserved
- Oct 22, 2009
Description
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-201311-10vendor-advisory
- MDVSA-2010:105vendor-advisory
- FEDORA-2010-1872vendor-advisory
- MDVSA-2010:091vendor-advisory
- http://support.avaya.com/css/P8/documents/100074869
- 39299third-party-advisory
- 38577third-party-advisory
- 38617third-party-advisory
- MDVSA-2010:035vendor-advisory
- 37414third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=537941
- http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup
- 55721third-party-advisory
- FEDORA-2010-1924vendor-advisory
- 38190third-party-advisory
- oval:org.mitre.oval:def:6951vdb-entrysignature
- http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec
- FEDORA-2009-12813vendor-advisory
- FEDORA-2011-1967vendor-advisory
- RHSA-2010:0039vendor-advisory
- MDVSA-2009:307vendor-advisory
- SUSE-SR:2010:006vendor-advisory
- FEDORA-2011-1990vendor-advisory
- 43617third-party-advisory
- FEDORA-2011-1958vendor-advisory
- [libtool] 20091116 GNU Libtool 2.2.6b releasedmailing-list
- ADV-2011-0574vdb-entry
- 37128vdb-entry
- [libtool] 20091116 Backport of libltdl changes to branch-1-5mailing-list
- 37489third-party-advisory
- 39347third-party-advisory
- RHSA-2010:0095vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- oval:org.mitre.oval:def:11687vdb-entrysignature
- 38696third-party-advisory
- 37997third-party-advisory
- 38915third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.