CVE-2005-3581 GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in....
HighCVSS 7.2
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gdal | = 1.2.5 | No fix listed |
| gdal | = 1.2.5_r1 | No fix listed |
| gdal | = 1.2.6_r1 | No fix listed |
| gdal | = 1.2.6_r2 | No fix listed |
| gdal | = 1.2.6_r3 | No fix listed |
| gdal | = 1.2.6_r4 | No fix listed |
| gdal | = 1.3.0 | No fix listed |
References
- 17427 patch third-party-advisory vendor-advisory
- GLSA-200511-02 patch vendor-advisory
- 20529 vdb-entry
- 15120 vdb-entry
- ADV-2005-2281 vdb-entry
- Debian Security Tracker CVE-2005-3581 vendor-advisory