PT-2011-3476 · Netbsd · Netbsd+1

Vincent Danen · Published 2011-05-23 · Updated 2017-08-17 · CVE-2011-1920

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 1.6.2 pmake version 1.111

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ depend temporary file. This is related to the bsd.lib.mk and bsd.prog.mk include files.

Recommendations For NetBSD versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. For pmake version 1.111, consider restricting access to temporary files in /tmp to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2011-1920

MGASA-2013-0331

Affected Products

Netbsd

Pmake

References · 14

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=705090 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/05/16/2 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626673 · Exploit
• https://advisories.mageia.org/MGASA-2013-0331.html · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=705100 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-1920 · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0331 · Vendor Advisory
• http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.lib.mk.diff?r1=1.239&r2=1.240&f=h · Patch
• http://openwall.com/lists/oss-security/2011/05/16/8 · Patch
• http://cvsweb.netbsd.org/bsdweb.cgi/src/share/mk/bsd.prog.mk.diff?r1=1.192&r2=1.193&f=h · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67495 · Note
• https://bugs.mageia.org/show_bug.cgi?id=11556 · Note
• http://gentoo.org/security/en/glsa/glsa-201310-17.xml · Note
• http://securityfocus.com/bid/47878 · Note