PT-2013-1430 · Gnu+2 · Gdb+2
Jan Kratochvil
·
Publicado
2013-02-20
·
Atualizado
2023-02-13
·
CVE-2011-4355
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
GNU Project Debugger (GDB) versions prior to 7.5
Description
The issue allows local users to gain privileges via crafted files, such as Python scripts, when .debug gdb scripts is defined. This occurs because GDB automatically loads certain files from the current working directory.
Recommendations
For versions prior to 7.5, update to version 7.5 or later to resolve the issue. As a temporary workaround, consider disabling the automatic loading of files from the current working directory when .debug gdb scripts is defined, until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Gdb
Red Hat