Fedora Core 3 : gdb-6.1post-1.20040607.43.0.1 (2005-1032)
High Nessus Plugin ID 20100
SynopsisThe remote Fedora Core host is missing a security update.
DescriptionThis is an fc3 update for gdb regarding security issues :
CVE-2005-1704 Integer Overflow in gdb
This problem is that gdb's internal copy of bfd does not protect against heap-based overflow.
CVE-2005-1705 gdb arbitrary command execution
This problem allows unprotected .gdbinit files to execute arbitrary commands during gdb startup.
Fixes for both problems are found in :
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpdate the affected gdb and / or gdb-debuginfo packages.