NetSight
IP …
medium6.9

CVE-2011-4355

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows l…

Impact

GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafted files such as Python scripts.

Affected products

VendorProductAffected versions
GnuGdb
through 7.4.1
Versions 4.18, 5.0, 5.0.92, 5.0.93, 5.1

Weakness classification

CWE-264

References