Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

For bugs related to Red Hat Enterprise Linux 2.1 product line. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 169905

Summary:	CAN-2005-1705 gdb arbitrary command execution
Product:	Red Hat Enterprise Linux 2.1	Reporter:	Josh Bressers <bressers>
Component:	gdb	Assignee:	Elena Zannoni <ezannoni>
Status:	CLOSED ERRATA	QA Contact:	Jay Turner <jturner>
Severity:	low	Docs Contact:
Priority:	medium
Version:	2.1	CC:	cagney, jjohnstn, srevivo
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=low,public=20050525,reported=20050520,source=vendorsec
Fixed In Version:	RHSA-2005-801	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-10-18 15:36:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-10-04 22:22:26 UTC

+++ This bug was initially created as a clone of Bug #158684 +++

gdb before 6.3 searches the current working directory to load the
.gdbinit configuration file, which allows local users to execute
arbitrary commands as the user running gdb.

More information can be found in the gentoo BTS:
http://bugs.gentoo.org/show_bug.cgi?id=88398

This bug is the placeholder for the pending RHEL2.1 errata.

Comment 1 Red Hat Bugzilla 2005-10-18 15:36:23 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2005-801.html