CVE-2009-4135 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-4135 Interim 1 4 2025-04-12T23:29:14Z current 2021-05-30T12:49:24Z 2025-04-12T23:29:14Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-4135 The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.3 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.6 coreutils coreutils-doc coreutils-lang coreutils as a component of SLES-LTSS-TERADATA 15 SP2 coreutils as a component of SUSE CaaS Platform 4.0 coreutils-lang as a component of SUSE CaaS Platform 4.0 coreutils as a component of SUSE Enterprise Storage 7 coreutils as a component of SUSE Enterprise Storage 7.1 coreutils-doc as a component of SUSE Enterprise Storage 7.1 coreutils-lang as a component of SUSE Enterprise Storage 7.1 coreutils as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS coreutils-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS coreutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS coreutils as a component of SUSE Linux Enterprise Micro 5.1 coreutils-doc as a component of SUSE Linux Enterprise Micro 5.1 coreutils as a component of SUSE Linux Enterprise Micro 5.2 coreutils as a component of SUSE Linux Enterprise Micro 5.3 coreutils as a component of SUSE Linux Enterprise Micro 5.4 coreutils as a component of SUSE Linux Enterprise Micro 5.5 coreutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 coreutils-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 coreutils-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 coreutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils-doc as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils-lang as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 coreutils as a component of SUSE Linux Enterprise Real Time 15 SP3 coreutils-doc as a component of SUSE Linux Enterprise Real Time 15 SP3 coreutils-lang as a component of SUSE Linux Enterprise Real Time 15 SP3 coreutils as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata coreutils as a component of SUSE Linux Enterprise Server 11 SP4 LTSS coreutils as a component of SUSE Linux Enterprise Server 12 SP2-BCL coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP2-BCL coreutils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP2-LTSS coreutils as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS coreutils as a component of SUSE Linux Enterprise Server 12 SP4-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS coreutils as a component of SUSE Linux Enterprise Server 12 SP5 coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP5 coreutils as a component of SUSE Linux Enterprise Server 12 SP5-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 12 SP5-LTSS coreutils as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security coreutils as a component of SUSE Linux Enterprise Server 15 SP1-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS coreutils as a component of SUSE Linux Enterprise Server 15 SP2-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15 SP2-LTSS coreutils as a component of SUSE Linux Enterprise Server 15 SP3-LTSS coreutils-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15 SP3-LTSS coreutils as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15 SP4-LTSS coreutils as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils-doc as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15 SP5-LTSS coreutils as a component of SUSE Linux Enterprise Server 15-LTSS coreutils-lang as a component of SUSE Linux Enterprise Server 15-LTSS coreutils as a component of SUSE Linux Enterprise Server Teradata 12 SP3 coreutils as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS coreutils as a component of SUSE Linux Enterprise Server Teradata 15 SP4 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 coreutils-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 coreutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 coreutils as a component of SUSE Linux Micro 6.0 coreutils as a component of SUSE Linux Micro 6.1 coreutils as a component of SUSE Manager Proxy 4.3 coreutils-doc as a component of SUSE Manager Proxy 4.3 coreutils-lang as a component of SUSE Manager Proxy 4.3 coreutils as a component of SUSE Manager Retail Branch Server 4.3 coreutils-doc as a component of SUSE Manager Retail Branch Server 4.3 coreutils-lang as a component of SUSE Manager Retail Branch Server 4.3 coreutils as a component of SUSE Manager Server 4.3 coreutils-doc as a component of SUSE Manager Server 4.3 coreutils-lang as a component of SUSE Manager Server 4.3 coreutils as a component of SUSE OpenStack Cloud 9 coreutils-lang as a component of SUSE OpenStack Cloud 9 coreutils as a component of SUSE OpenStack Cloud Crowbar 9 coreutils-lang as a component of SUSE OpenStack Cloud Crowbar 9 coreutils as a component of openSUSE Leap 15.6 coreutils-doc as a component of openSUSE Leap 15.6 coreutils-lang as a component of openSUSE Leap 15.6 The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. CVE-2009-4135 SLES-LTSS-TERADATA 15 SP2:coreutils SUSE CaaS Platform 4.0:coreutils SUSE CaaS Platform 4.0:coreutils-lang SUSE Enterprise Storage 7.1:coreutils SUSE Enterprise Storage 7.1:coreutils-doc SUSE Enterprise Storage 7.1:coreutils-lang SUSE Enterprise Storage 7:coreutils SUSE Linux Enterprise High Performance Computing 12 SP5:coreutils SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:coreutils-lang SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:coreutils-lang SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:coreutils-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:coreutils-lang SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils-doc SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:coreutils-lang SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils-doc SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:coreutils-lang SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils-doc SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:coreutils-lang SUSE Linux Enterprise Micro 5.1:coreutils SUSE Linux Enterprise Micro 5.1:coreutils-doc SUSE Linux Enterprise Micro 5.2:coreutils SUSE Linux Enterprise Micro 5.3:coreutils SUSE Linux Enterprise Micro 5.4:coreutils SUSE Linux Enterprise Micro 5.5:coreutils SUSE Linux Enterprise Module for Basesystem 15 SP4:coreutils SUSE Linux Enterprise Module for Basesystem 15 SP4:coreutils-doc SUSE Linux Enterprise Module for Basesystem 15 SP4:coreutils-lang SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils-doc SUSE Linux Enterprise Module for Basesystem 15 SP6:coreutils-lang SUSE Linux Enterprise Real Time 15 SP3:coreutils SUSE Linux Enterprise Real Time 15 SP3:coreutils-doc SUSE Linux Enterprise Real Time 15 SP3:coreutils-lang SUSE Linux Enterprise Server 11 SP3 for Teradata:coreutils SUSE Linux Enterprise Server 11 SP4 LTSS:coreutils SUSE Linux Enterprise Server 12 SP2-BCL:coreutils SUSE Linux Enterprise Server 12 SP2-BCL:coreutils-lang SUSE Linux Enterprise Server 12 SP2-LTSS:coreutils SUSE Linux Enterprise Server 12 SP2-LTSS:coreutils-lang SUSE Linux Enterprise Server 12 SP4-ESPOS:coreutils SUSE Linux Enterprise Server 12 SP4-ESPOS:coreutils-lang SUSE Linux Enterprise Server 12 SP4-LTSS:coreutils SUSE Linux Enterprise Server 12 SP4-LTSS:coreutils-lang SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:coreutils SUSE Linux Enterprise Server 12 SP5-LTSS:coreutils SUSE Linux Enterprise Server 12 SP5-LTSS:coreutils-lang SUSE Linux Enterprise Server 12 SP5:coreutils SUSE Linux Enterprise Server 12 SP5:coreutils-lang SUSE Linux Enterprise Server 15 SP1-LTSS:coreutils SUSE Linux Enterprise Server 15 SP1-LTSS:coreutils-lang SUSE Linux Enterprise Server 15 SP2-LTSS:coreutils SUSE Linux Enterprise Server 15 SP2-LTSS:coreutils-lang SUSE Linux Enterprise Server 15 SP3-LTSS:coreutils SUSE Linux Enterprise Server 15 SP3-LTSS:coreutils-doc SUSE Linux Enterprise Server 15 SP3-LTSS:coreutils-lang SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils-doc SUSE Linux Enterprise Server 15 SP4-LTSS:coreutils-lang SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils-doc SUSE Linux Enterprise Server 15 SP5-LTSS:coreutils-lang SUSE Linux Enterprise Server 15-LTSS:coreutils SUSE Linux Enterprise Server 15-LTSS:coreutils-lang SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:coreutils SUSE Linux Enterprise Server Teradata 12 SP3:coreutils SUSE Linux Enterprise Server Teradata 15 SP4:coreutils SUSE Linux Enterprise Server for SAP Applications 12 SP4:coreutils SUSE Linux Enterprise Server for SAP Applications 12 SP4:coreutils-lang SUSE Linux Enterprise Server for SAP Applications 12 SP5:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP1:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP1:coreutils-lang SUSE Linux Enterprise Server for SAP Applications 15 SP2:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:coreutils-lang SUSE Linux Enterprise Server for SAP Applications 15 SP3:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP3:coreutils-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:coreutils-lang SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils-doc SUSE Linux Enterprise Server for SAP Applications 15 SP4:coreutils-lang SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils-doc SUSE Linux Enterprise Server for SAP Applications 15 SP5:coreutils-lang SUSE Linux Micro 6.0:coreutils SUSE Linux Micro 6.1:coreutils SUSE Manager Proxy 4.3:coreutils SUSE Manager Proxy 4.3:coreutils-doc SUSE Manager Proxy 4.3:coreutils-lang SUSE Manager Retail Branch Server 4.3:coreutils SUSE Manager Retail Branch Server 4.3:coreutils-doc SUSE Manager Retail Branch Server 4.3:coreutils-lang SUSE Manager Server 4.3:coreutils SUSE Manager Server 4.3:coreutils-doc SUSE Manager Server 4.3:coreutils-lang SUSE OpenStack Cloud 9:coreutils SUSE OpenStack Cloud 9:coreutils-lang SUSE OpenStack Cloud Crowbar 9:coreutils SUSE OpenStack Cloud Crowbar 9:coreutils-lang openSUSE Leap 15.6:coreutils openSUSE Leap 15.6:coreutils-doc openSUSE Leap 15.6:coreutils-lang moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P