CVE-2009-4135

Name of the Vulnerable Software and Affected Versions GNU coreutils versions 5.2.1 through 8.1

Description The issue allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. This is related to the distcheck rule in dist-check.mk.

Recommendations For GNU coreutils versions 5.2.1 through 8.1, consider restricting access to the distcheck rule in dist-check.mk to minimize the risk of exploitation. As a temporary workaround, avoid using the distcheck rule until a patch is available.