CVEvulnerability

CVE-2011-4355

6.9 MEDIUM Published 2013-03-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

Affected configurations

• gnu gdb (<= 7.4.1) • gnu gdb 4.18 • gnu gdb 5.0 • gnu gdb 5.0.92 • gnu gdb 5.0.93 • gnu gdb 5.1 • gnu gdb 5.1.1 • gnu gdb 5.2 • gnu gdb 5.2.1 • gnu gdb 5.3 • gnu gdb 6.0 • gnu gdb 6.1 • gnu gdb 6.1.1 • gnu gdb 6.2 • gnu gdb 6.2.1 • gnu gdb 6.3 • gnu gdb 6.4 • gnu gdb 6.5 • gnu gdb 6.6 • gnu gdb 6.7 • gnu gdb 6.7.1 • gnu gdb 6.8 • gnu gdb 7.0 • gnu gdb 7.0.1 • gnu gdb 7.1 • gnu gdb 7.2 • gnu gdb 7.3 • gnu gdb 7.3.1 • gnu gdb 7.4

Related

Weakness · not in database (1)

References