7.2

CVE-2005-3581

GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gdal ≫ Gdal Version1.2.5
Gdal ≫ Gdal Version1.2.5_r1
Gdal ≫ Gdal Version1.2.6_r1
Gdal ≫ Gdal Version1.2.6_r2
Gdal ≫ Gdal Version1.2.6_r3
Gdal ≫ Gdal Version1.2.6_r4
Gdal ≫ Gdal Version1.3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.317
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17427/
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15120
http://www.vupen.com/english/advisories/2005/2281
http://www.osvdb.org/20529