CVE-2005-1705 gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
HighCVSS 7.2
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gdb | <= 6.3 | No fix listed |
| debian/gdb(Debian:12) | < 6.3-6 | 6.3-6 |
| debian/gdb(Debian:13) | < 6.3-6 | 6.3-6 |
| debian/gdb(Debian:14) | < 6.3-6 | 6.3-6 |
References
- bugs.gentoo.org
- 17072 patch third-party-advisory vendor-advisory
- 17356 third-party-advisory
- 18506 third-party-advisory
- GLSA-200505-15 vendor-advisory
- support.avaya.com
- MDKSA-2005:095 patch vendor-advisory
- RHSA-2005:709 patch vendor-advisory
- RHSA-2005:801 patch vendor-advisory
- oval:org.mitre.oval:def:11072 signature vdb-entry
- Debian Security Tracker CVE-2005-1705 vendor-advisory