CVE-2005-1705
UnknownEPSS 0.44%
Last modified
CVE-2005-1705 is a vulnerability of currently unknown severity. gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.. EPSS estimates a 0.44% chance of exploitation in the next 30 days.
Description
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Gnu | Gdb | <= 6.3 | R2 |
References
- http://secunia.com/advisories/17072Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200505-15.xmlVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:095Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-709.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-801.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/17072Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200505-15.xmlVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:095Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-709.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-801.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1705?
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.
How severe is CVE-2005-1705?
Severity scoring for CVE-2005-1705 is pending analysis. The EPSS model estimates a 0.44% probability of exploitation in the next 30 days.
How do I fix CVE-2005-1705?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1699Directory traversal vulnerability in pnadminapi.php in the X…
- CVE-2005-1700SQL injection vulnerability in pnadmin.php in the Xanthia mo…
- CVE-2005-1701SQL injection vulnerability in PortailPHP 1.3 allows remote …
- CVE-2005-1702Format string vulnerability in Warrior Kings: Battles 1.23 a…
- CVE-2005-1703Warrior Kings: Battles 1.23 and earlier allows remote attack…
- CVE-2005-1704Integer overflow in the Binary File Descriptor (BFD) library…
- CVE-2005-1706Unknown vulnerability in MailScanner 4.41.3 and earlier, rel…
- CVE-2005-1707The fn_show_postinst function in Gentoo webapp-config before…
- CVE-2005-1708templates.admin.users.user_form_processing in Blue Coat Repo…
- CVE-2005-1709Unknown vulnerability in Blue Coat Reporter before 7.1.2 all…
- CVE-2005-1710Multiple cross-site scripting (XSS) vulnerabilities in Blue …
- CVE-2005-1711Gibraltar Firewall 2.2 and earlier, when using the ClamAV up…
Are you affected by CVE-2005-1705?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST