Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Automake不安全目录许可权限漏洞
Vulnerability Description
当产生一个使用Automake的信息包的分配tarball时，GNU Automake 1.11.1, 1.10.3,以及版本分支branch-1-4到branch-1-9中的(1) dist或(2) distcheck规则,在子目录结构的目录中赋予不安全许可(777),由此引入的一个紊乱情况使本地用户可以修改文件信息包的内容，引入特洛伊木马程序，或导致构建完成前的其他攻击。
CVSS Information
N/A
Vulnerability Type
N/A