Unscored severity · published May 24, 2005
CVE-2005-1705
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb
–
CVSS
0.4%
EPSS
No
On KEV
Description
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdb · Gnu
through 6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1705
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1705
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=88398
Patch
http://secunia.com/advisories/17072
secunia.com
http://secunia.com/advisories/17356
secunia.com
http://secunia.com/advisories/18506
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200505-15.xml
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm
More from Gdb
7.8
CVE-2019-1010180
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access
5.5
CVE-2023-39130
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c
5.5
CVE-2023-39129
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c
5.5
CVE-2023-39128
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c
5.5
CVE-2017-9778
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section