Lucene search

K
redhatRedHatRHSA-2005:416
HistoryJun 02, 2005 - 12:00 a.m.

(RHSA-2005:416) kdbg security update

2005-06-0200:00:00
access.redhat.com
10

EPSS

0

Percentile

5.1%

Kdbg is a K Desktop Environment (KDE) GUI for gdb, the GNU debugger.

Kdbg 1.1.0 through 1.2.8 does not check permissions of the .kdbgrc file.
If a program is located in a world-writable location, it is possible for a
local user to inject malicious commands. These commands are then executed
with the permission of any user that runs Kdbg. The Common Vulnerabilities
and Exposures project assigned the name CAN-2003-0644 to this issue.

Users of Kdbg should upgrade to this updated package, which contains a
backported patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyia64kdbg< 1.2.1-7kdbg-1.2.1-7.ia64.rpm
RedHatanyi386kdbg< 1.2.1-7kdbg-1.2.1-7.i386.rpm

EPSS

0

Percentile

5.1%