Detections
Analytics
Scientific Linux Security Update : automake on SL5.x i386/x86_64
medium Nessus Plugin ID 60761
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
Automake-generated Makefiles made certain directories world-writable when preparing source archives, as was recommended by the GNU Coding Standards. If a malicious, local user could access the directory where a victim was creating distribution archives, they could use this flaw to modify the files being added to those archives. Makefiles generated by these updated automake packages no longer make distribution directories world-writable, as recommended by the updated GNU Coding Standards. (CVE-2009-4029)Note: This issue affected Makefile targets used by developers to prepare distribution source archives. Those targets are not used when compiling programs from the source code.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 60761
File Name: sl_20100330_automake_on_SL5_x.nasl
Version: 1.6
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 4.4
Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 3/30/2010
Reference Information
CVE: CVE-2009-4029
CWE: 264