CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...

3.3 LowFix available

CVE-2011-1920 is a low vulnerability (CVSS 3.3) in Ihji Pmake, published May 23, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in pmake 1.45-10.1.mga2.

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Exploit likelihood

0.44%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 3.3

Record: CVE-2011-1920
CVSS 2.0: 3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-1920
Updated: 2026-11-02

EUVDEUVD-2011-1918 No score

Record: EUVD-2011-1918
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6v7q-gh5p-vgqc No score

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...

Record: GHSA-6v7q-gh5p-vgqc
Weakness: CWE-59
Updated: 2026-11-02

OSVMGASA-2013-0331 No score

Updated pmake packages fix CVE-2011-1920

Updated pmake package fixes security vulnerability:

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and earlier, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to bsd.lib.mk and bsd.prog.mk (CVE-2011-1920).

Record: MGASA-2013-0331
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`pmake` Mageia:2	before 1.45-10.1.mga2	1.45-10.1.mga2
`pmake` Mageia:3	before 1.45-11.1.mga3	1.45-11.1.mga3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 8 moreShow less