CVE-2005-1705
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
9.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
Affected configurations
References
bugs.gentoo.org/show_bug.cgi?id=88398
secunia.com/advisories/17072
secunia.com/advisories/17356
secunia.com/advisories/18506
security.gentoo.org/glsa/glsa-200505-15.xml
support.avaya.com/elmodocs2/security/ASA-2006-015.htm
www.mandriva.com/security/advisories?name=MDKSA-2005:095
www.redhat.com/support/errata/RHSA-2005-709.html
www.redhat.com/support/errata/RHSA-2005-801.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11072
Related
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
9.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%