Back to feed
EUVD-2005-4881 · Published Nov 4, 2019
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
Technologies
Debian ShadowSudo_Project SudoRedhat Enterprise LinuxDebian Debian Linux
Weaknesses
CWE-20
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.07.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- http://www.openwall.com/lists/oss-security/2016/02/25/6
- http://www.openwall.com/lists/oss-security/2012/11/06/8
- http://www.openwall.com/lists/oss-security/2013/05/20/3
- http://www.openwall.com/lists/oss-security/2013/11/28/10
- http://www.openwall.com/lists/oss-security/2013/11/29/5
- http://www.openwall.com/lists/oss-security/2014/10/20/9
Potentially impacted assets
See if this affects your attack surface
