Family: Fedora Local Security Checks --> Category: infos
Fedora Core 4 2005-1033: gdb Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the gdb package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory FEDORA-2005-1033 (gdb).
GDB, the GNU debugger, allows you to debug programs written in C, C++,
Java, and other languages, by executing them in a controlled fashion
and printing their data.
This is an fc4 update for gdb that includes security issues:
CAN-2005-1704 Integer Overflow in gdb
This problem is that gdb's internal copy of bfd
does not protect against heap-based overflow.
CAN-2005-1705 gdb arbitrary command execution
This problem allows unprotected .gdbinit files
to execute arbitrary commands during gdb startup.
Fixes for both problems are found in:
This release also contains some additional fixes
from the last update.
Solution : Get the newest Fedora Updates
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.