Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:libtool:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductLibtool (b0b44e4b-8780-5c34-8dea-5bd3dcd4b4da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libtool purl2cpe 2026-06-01 10:11:53.348964
pkg:deb/ubuntu/libtool purl2cpe 2026-06-01 10:11:53.348965
pkg:github/autotools-mirror/libtool purl2cpe 2026-06-01 10:11:53.348967
pkg:github/cray/libtool purl2cpe 2026-06-01 10:11:53.348968
pkg:github/distrotech/libtool purl2cpe 2026-06-01 10:11:53.348969
pkg:gitlab/redhat/libtool purl2cpe 2026-06-01 10:11:53.348971
pkg:gnu/libtool purl2cpe 2026-06-01 10:11:53.348972
pkg:rpm/centos/libtool purl2cpe 2026-06-01 10:11:53.348973
pkg:rpm/fedora/libtool purl2cpe 2026-06-01 10:11:53.348975
pkg:rpm/opensuse/libtool purl2cpe 2026-06-01 10:11:53.348976

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3736 vulnerable 2026-06-08 04:51:44.095107 Details available
ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
Published: 2009-11-27T20:00:00.000Z
Updated: 2024-08-07T06:38:29.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0256 vulnerable 2026-06-08 04:47:49.204722 Details available
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.791Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.