CVE-2005-3581
published 2005-11-16CVE-2005-3581: GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is…
PriorityP418high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.40%
31.9th percentile
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
| gdal | gdal | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_debian7.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c3mq-55v5-ggj5: GDAL before 1
ghsa_unreviewed·2022-05-01
CVE-2005-3581 [HIGH] GHSA-c3mq-55v5-ggj5: GDAL before 1
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Debian
CVE-2005-3581: gdal - GDAL before 1.3.0-r1 allows local users in the portage group to increase privile...
vendor_debian·2005·CVSS 7.2
CVE-2005-3581 [HIGH] CVE-2005-3581: gdal - GDAL before 1.3.0-r1 allows local users in the portage group to increase privile...
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/17427/http://www.gentoo.org/security/en/glsa/glsa-200511-02.xmlhttp://www.osvdb.org/20529http://www.securityfocus.com/bid/15120http://www.vupen.com/english/advisories/2005/2281http://secunia.com/advisories/17427/http://www.gentoo.org/security/en/glsa/glsa-200511-02.xmlhttp://www.osvdb.org/20529http://www.securityfocus.com/bid/15120http://www.vupen.com/english/advisories/2005/2281
2005-11-16
Published