CVE-2010-1457

GNUstep Base <1.20.0 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1457. PoCs published by Dan Rosenberg.

AI-analyzed exploit summary The provided text describes local information-disclosure vulnerabilities in gdomap, where attackers can use command-line options to read sensitive files like /etc/shadow. No actual exploit code is present, only usage examples.

Description

Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dan Rosenberg · textlocallinux
https://www.exploit-db.com/exploits/33963

The provided text describes local information-disclosure vulnerabilities in gdomap, where attackers can use command-line options to read sensitive files like /etc/shadow. No actual exploit code is present, only usage examples.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: gdomap (version not specified)
No auth needed
Prerequisites: Local access to the system where gdomap is installed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39746
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/05/07/6
Various Sources x_refsource_confirm
http://savannah.gnu.org/bugs/?29755
Various Sources x_refsource_confirm
http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40005

Scores

EPSS 0.0086
EPSS Percentile 53.8%

Details

CWE
CWE-200
Status published
Products (14)
gnustep/gnustep_base 1.11.2
gnustep/gnustep_base 1.12.0
gnustep/gnustep_base 1.13.0
gnustep/gnustep_base 1.14.0
gnustep/gnustep_base 1.15.0
gnustep/gnustep_base 1.15.1
gnustep/gnustep_base 1.15.2
gnustep/gnustep_base 1.15.4
gnustep/gnustep_base 1.17.0
gnustep/gnustep_base 1.18.0
... and 4 more
Published May 12, 2010
Tracked Since Feb 18, 2026