Every CVESearch/Get API key

CVE-2011-1920

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...

3.3 LowFix available

CVE-2011-1920 is a low vulnerability (CVSS 3.3) in Ihji Pmake, published May 23, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in pmake 1.45-10.1.mga2.

What does this mean?
Severity
3.3 LowCVSS 2.0, NVD
Exploit chance
0.44%EPSS, 38th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.45-10.1.mga2pmake +1 more

Description

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Exploit likelihood

0.44%Down 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pmake
Mageia:2
before 1.45-10.1.mga2
1.45-10.1.mga2
pmake
Mageia:3
before 1.45-11.1.mga3
1.45-11.1.mga3

What each source reports

NVD Score used3.3

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Record
CVE-2011-1920
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Record
CVE-2011-1920
Updated
2026-11-02
EUVDEUVD-2011-1918No score

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Record
EUVD-2011-1918
Updated
2026-11-03
GitHub AdvisoriesGHSA-6v7q-gh5p-vgqcNo score

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow...

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to (1) bsd.lib.mk and (2) bsd.prog.mk.

Record
GHSA-6v7q-gh5p-vgqc
Weakness
CWE-59
Updated
2026-11-02
OSVMGASA-2013-0331No score

Updated pmake packages fix CVE-2011-1920

Updated pmake package fixes security vulnerability:

The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and earlier, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, related to bsd.lib.mk and bsd.prog.mk (CVE-2011-1920).

Record
MGASA-2013-0331
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 8 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open