cpe:/a:gnu:automake:1.0 cpe:/a:gnu:automake:1.2 cpe:/a:gnu:automake:1.3 cpe:/a:gnu:automake:1.4 cpe:/a:gnu:automake:1.4:p1 cpe:/a:gnu:automake:1.4:p2 cpe:/a:gnu:automake:1.4:p3 cpe:/a:gnu:automake:1.4:p4 cpe:/a:gnu:automake:1.4:p5 cpe:/a:gnu:automake:1.4:p6 cpe:/a:gnu:automake:1.5 cpe:/a:gnu:automake:1.6 cpe:/a:gnu:automake:1.6.1 cpe:/a:gnu:automake:1.6.2 cpe:/a:gnu:automake:1.6.3 cpe:/a:gnu:automake:1.7 cpe:/a:gnu:automake:1.7.1 cpe:/a:gnu:automake:1.7.2 cpe:/a:gnu:automake:1.7.3 cpe:/a:gnu:automake:1.7.4 cpe:/a:gnu:automake:1.7.5 cpe:/a:gnu:automake:1.7.6 cpe:/a:gnu:automake:1.7.7 cpe:/a:gnu:automake:1.7.8 cpe:/a:gnu:automake:1.7.9 cpe:/a:gnu:automake:1.8 cpe:/a:gnu:automake:1.8.1 cpe:/a:gnu:automake:1.8.2 cpe:/a:gnu:automake:1.8.3 cpe:/a:gnu:automake:1.8.4 cpe:/a:gnu:automake:1.8.5 cpe:/a:gnu:automake:1.9 cpe:/a:gnu:automake:1.9.1 cpe:/a:gnu:automake:1.9.2 cpe:/a:gnu:automake:1.9.3 cpe:/a:gnu:automake:1.9.4 cpe:/a:gnu:automake:1.9.5 cpe:/a:gnu:automake:1.9.6 cpe:/a:gnu:automake:1.10 cpe:/a:gnu:automake:1.10.0.3 cpe:/a:gnu:automake:1.10.1 cpe:/a:gnu:automake:1.10.2 cpe:/a:gnu:automake:1.10.3 cpe:/a:gnu:automake:1.11.1 cpe:/a:gnu:automake:1.11.2 cpe:/a:gnu:automake:1.11.3 cpe:/a:gnu:automake:1.11.4 cpe:/a:gnu:automake:1.11.5 cpe:/a:gnu:automake:1.12 cpe:/a:gnu:automake:1.12.1 CVE-2012-3386 2012-08-07T17:55:01.420-04:00 2013-04-04T23:11:57.613-04:00 4.4 LOCAL MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2012-08-08T12:41:00.000-04:00 FEDORA FEDORA-2012-14297 FEDORA FEDORA-2012-14349 FEDORA FEDORA-2012-14770 MANDRIVA MDVSA-2012:103 REDHAT RHSA-2013:0526 MLIST [automake] 20120709 CVE-2012-3386 Automake security fix for 'make distcheck' MLIST [automake] 20120709 GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!) MLIST [automake] 20120709 GNU Automake 1.12.2 released (fixes a SECURITY VULNERABILITY!) CONFIRM http://git.savannah.gnu.org/cgit/automake.git/commit/?id=784b3e6ccc7c72a1c95c340cbbe8897d6b689d76 SUSE openSUSE-SU-2012:1519 The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.