Lucene search

K
nvd[email protected]NVD:CVE-2011-4355
HistoryMar 05, 2013 - 9:38 p.m.

CVE-2011-4355

2013-03-0521:38:53
CWE-264
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

Affected configurations

NVD
Node
gnugdbRangeโ‰ค7.4.1
OR
gnugdbMatch4.18
OR
gnugdbMatch5.0
OR
gnugdbMatch5.0.92
OR
gnugdbMatch5.0.93
OR
gnugdbMatch5.1
OR
gnugdbMatch5.1.1
OR
gnugdbMatch5.2
OR
gnugdbMatch5.2.1
OR
gnugdbMatch5.3
OR
gnugdbMatch6.0
OR
gnugdbMatch6.1
OR
gnugdbMatch6.1.1
OR
gnugdbMatch6.2
OR
gnugdbMatch6.2.1
OR
gnugdbMatch6.3
OR
gnugdbMatch6.4
OR
gnugdbMatch6.5
OR
gnugdbMatch6.6
OR
gnugdbMatch6.7
OR
gnugdbMatch6.7.1
OR
gnugdbMatch6.8
OR
gnugdbMatch7.0
OR
gnugdbMatch7.0.1
OR
gnugdbMatch7.1
OR
gnugdbMatch7.2
OR
gnugdbMatch7.3
OR
gnugdbMatch7.3.1
OR
gnugdbMatch7.4

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%