PT-2005-1060 · Gnu+1 · Gdb+1
Tavis Ormandy
·
Publicado
2005-05-24
·
Atualizado
2017-10-11
·
CVE-2005-1705
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
gdb versions prior to 6.3
Description
The issue allows local users to execute arbitrary commands as the user running gdb, due to gdb searching the current working directory to load the .gdbinit configuration file. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally.
Recommendations
For versions prior to 6.3, update to version 6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the .gdbinit configuration file to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Gdb