CVE-2011-4355

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4355
GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

6.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2013-0522.html
http://sourceware.org/cgi-bin/cvsweb.cgi/~checkout~/src/gdb/NEWS?content-type=text/x-cvsweb-markup&cvsroot=src
http://sourceware.org/ml/gdb-patches/2011-04/msg00559.html
http://sourceware.org/ml/gdb-patches/2011-05/msg00202.html
http://www.securitytracker.com/id/1028191
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:gdb:*:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:4.18:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.0.92:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.0.93:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:5.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.5:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.6:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.7:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.7.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:6.8:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.0:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gdb:7.4:*:*:*:*:*:*:*
History

13 Feb 2023, 00:21

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2013:0522', 'name': 'https://access.redhat.com/errata/RHSA-2013:0522', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2011-4355', 'name': 'https://access.redhat.com/security/cve/CVE-2011-4355', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=703238', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=703238', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

02 Feb 2023, 15:15

Type Values Removed Values Added
Summary GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts. CVE-2011-4355 gdb: object file .debug_gdb_scripts section improper input validation
References
  • (MISC) https://access.redhat.com/errata/RHSA-2013:0522 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2011-4355 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=703238 -
Information

Published : 2013-03-05 21:38

Updated : 2023-12-10 11:16

NVD link : CVE-2011-4355

Mitre link : CVE-2011-4355

CVE.ORG link : CVE-2011-4355

JSON object : View

Products Affected

gnu

  • gdb
CWE
CWE-264

Permissions, Privileges, and Access Controls