CVE-2005-3581

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17427/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200511-02.xmlPatch, Vendor Advisory
http://www.osvdb.org/20529
http://www.securityfocus.com/bid/15120
http://www.vupen.com/english/advisories/2005/2281
http://secunia.com/advisories/17427/Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200511-02.xmlPatch, Vendor Advisory
http://www.osvdb.org/20529
http://www.securityfocus.com/bid/15120
http://www.vupen.com/english/advisories/2005/2281

Timeline

Published: Nov 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-35827.2ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary bu CVE-2005-35837.8(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow CVE-2005-35844.3Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML v CVE-2005-35857.5SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum param CVE-2005-35865.0content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes CVE-2005-358710.0Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vector CVE-2005-35887.5SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privil CVE-2005-35897.8Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER CVE-2005-35909.8The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer CVE-2005-35917.5Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attacker CVE-2005-35925.0index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an CVE-2005-35945.0game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $g