CVE-2009-3736
CVE-2009-3736
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
clamav Debian:12
- Affected ranges
- ECOSYSTEM: < 0.95+dfsg-1
Update to 0.95+dfsg-1
clamav Debian:13
- Affected ranges
- ECOSYSTEM: < 0.95+dfsg-1
Update to 0.95+dfsg-1
clamav Debian:14
- Affected ranges
- ECOSYSTEM: < 0.95+dfsg-1
Update to 0.95+dfsg-1
collectd Debian:12
- Affected ranges
- ECOSYSTEM: < 4.8.2-1
Update to 4.8.2-1
collectd Debian:13
- Affected ranges
- ECOSYSTEM: < 4.8.2-1
Update to 4.8.2-1
ggobi Debian:12
- Affected ranges
- ECOSYSTEM: < 2.1.9~20091212-1
Update to 2.1.9~20091212-1
graphicsmagick Debian:12
- Affected ranges
- ECOSYSTEM: < 1.3.5-6
Update to 1.3.5-6
graphicsmagick Debian:13
- Affected ranges
- ECOSYSTEM: < 1.3.5-6
Update to 1.3.5-6
graphicsmagick Debian:14
- Affected ranges
- ECOSYSTEM: < 1.3.5-6
Update to 1.3.5-6
graphviz Debian:12
- Affected ranges
- ECOSYSTEM: < 2.26.3-14
Update to 2.26.3-14
graphviz Debian:13
- Affected ranges
- ECOSYSTEM: < 2.26.3-14
Update to 2.26.3-14
graphviz Debian:14
- Affected ranges
- ECOSYSTEM: < 2.26.3-14
Update to 2.26.3-14
hamlib Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.10-1
Update to 1.2.10-1
hamlib Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.10-1
Update to 1.2.10-1
hamlib Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.10-1
Update to 1.2.10-1
heartbeat Debian:12
- Affected ranges
- ECOSYSTEM: < 2.1.4-7
Update to 2.1.4-7
heartbeat Debian:13
- Affected ranges
- ECOSYSTEM: < 2.1.4-7
Update to 2.1.4-7
heartbeat Debian:14
- Affected ranges
- ECOSYSTEM: < 2.1.4-7
Update to 2.1.4-7
hercules Debian:12
- Affected ranges
- ECOSYSTEM: < 3.06-1.2
Update to 3.06-1.2
hercules Debian:13
- Affected ranges
- ECOSYSTEM: < 3.06-1.2
Update to 3.06-1.2
hercules Debian:14
- Affected ranges
- ECOSYSTEM: < 3.06-1.2
Update to 3.06-1.2
hypre Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.0b-5
Update to 2.4.0b-5
hypre Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.0b-5
Update to 2.4.0b-5
Original sources
- http://security.gentoo.org/glsa/glsa-201311-10.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:105
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:091
- http://support.avaya.com/css/P8/documents/100074869
- http://secunia.com/advisories/39299
- http://secunia.com/advisories/38577
- http://secunia.com/advisories/38617
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:035
- http://secunia.com/advisories/37414
- https://bugzilla.redhat.com/show_bug.cgi?id=537941
- http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup
- http://secunia.com/advisories/55721
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html
- http://secunia.com/advisories/38190
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951
- http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html
- http://www.redhat.com/support/errata/RHSA-2010-0039.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:307
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html
- https://nvd.nist.gov/vuln/detail/CVE-2009-3736