CVEvulnerability
CVE-2011-4355
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.
Affected configurations
• gnu gdb (<= 7.4.1)
• gnu gdb 4.18
• gnu gdb 5.0
• gnu gdb 5.0.92
• gnu gdb 5.0.93
• gnu gdb 5.1
• gnu gdb 5.1.1
• gnu gdb 5.2
• gnu gdb 5.2.1
• gnu gdb 5.3
• gnu gdb 6.0
• gnu gdb 6.1
• gnu gdb 6.1.1
• gnu gdb 6.2
• gnu gdb 6.2.1
• gnu gdb 6.3
• gnu gdb 6.4
• gnu gdb 6.5
• gnu gdb 6.6
• gnu gdb 6.7
• gnu gdb 6.7.1
• gnu gdb 6.8
• gnu gdb 7.0
• gnu gdb 7.0.1
• gnu gdb 7.1
• gnu gdb 7.2
• gnu gdb 7.3
• gnu gdb 7.3.1
• gnu gdb 7.4
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-0522.html rhn.redhat.com
- http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src sourceware.org
- http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html sourceware.org
- http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html sourceware.org
- http://www.securitytracker.com/id/1028191 www.securitytracker.com
- http://rhn.redhat.com/errata/RHSA-2013-0522.html rhn.redhat.com
- http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src sourceware.org
- http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html sourceware.org
- http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html sourceware.org
- http://www.securitytracker.com/id/1028191 www.securitytracker.com