GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:32
Type | Values Removed | Values Added |
---|---|---|
References | () http://rhn.redhat.com/errata/RHSA-2013-0522.html - | |
References | () http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src - | |
References | () http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html - | |
References | () http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html - | |
References | () http://www.securitytracker.com/id/1028191 - |
Information
Published : 2013-03-05 21:38
Updated : 2024-11-21 01:32
NVD link : CVE-2011-4355
Mitre link : CVE-2011-4355
CVE.ORG link : CVE-2011-4355
JSON object : View
Products Affected
gnu
- gdb
CWE
CWE-264
Permissions, Privileges, and Access Controls