Unscored severity · published Nov 16, 2005
CVE-2005-3581
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path…
–
CVSS
0.4%
EPSS
No
On KEV
Description
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdal · Gdal
1.2.5; 1.2.5_r1; 1.2.6_r1; 1.2.6_r2; 1.2.6_r3; 1.2.6_r4; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3581
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3581
Patch
http://secunia.com/advisories/17427/
Patch
http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
www.osvdb.org
http://www.osvdb.org/20529
www.securityfocus.com
http://www.securityfocus.com/bid/15120
www.vupen.com
http://www.vupen.com/english/advisories/2005/2281
More from Gdal
7.8
CVE-2026-49014
In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow