CVE-2010-1457

NameCVE-2010-1457
DescriptionTools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs584402

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gnustep-base (PTS)buster1.26.0-4+deb10u1fixed
bullseye1.27.0-3fixed
bookworm1.28.1+really1.28.0-5fixed
sid, trixie1.29.0-7fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gnustep-basesourcelenny(not affected)
gnustep-basesource(unstable)1.19.3-2584402

Notes

[lenny] - gnustep-base <not-affected> (Not installed setuid root)
http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336

Search for package or bug name: Reporting problems