CVE-2009-4029 | BDVDB-2026-39693 Detail

Description#

The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12009-12-20Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.