Fedora Core 4 : gdb-22.214.171.124-1.84 (2005-1033)
High Nessus Plugin ID 20101
SynopsisThe remote Fedora Core host is missing a security update.
DescriptionThis is an fc4 update for gdb that includes security issues :
CVE-2005-1704 Integer Overflow in gdb
This problem is that gdb's internal copy of bfd does not protect against heap-based overflow.
CVE-2005-1705 gdb arbitrary command execution
This problem allows unprotected .gdbinit files to execute arbitrary commands during gdb startup.
Fixes for both problems are found in :
This release also contains some additional fixes from the last update.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpdate the affected gdb and / or gdb-debuginfo packages.