Upstream information
Description
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)
Novell/SUSE information
Novell Bugzilla entry: 770618, 786745 SUSE Security Advisories:- openSUSE-SU-2012:1519-1, published Wed, 21 Nov 2012 14:08:26 +0100 (CET)