CVE-2005-4280

Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:kitware:cmake:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.0_beta1:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.0_beta2:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.4:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.5:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.6:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.6.7:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:kitware:cmake:2.2.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:03

Type Values Removed Values Added
References () http://secunia.com/advisories/17232 - Vendor Advisory () http://secunia.com/advisories/17232 - Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml - () http://www.gentoo.org/security/en/glsa/glsa-200510-14.xml -
References () http://www.osvdb.org/20088 - () http://www.osvdb.org/20088 -
References () http://www.securityfocus.com/bid/15120 - () http://www.securityfocus.com/bid/15120 -
References () http://www.vupen.com/english/advisories/2005/2119 - () http://www.vupen.com/english/advisories/2005/2119 -

Information

Published : 2005-12-16 11:03

Updated : 2025-04-03 01:03


NVD link : CVE-2005-4280

Mitre link : CVE-2005-4280

CVE.ORG link : CVE-2005-4280


JSON object : View

Products Affected

kitware

  • cmake