Lucene search
K

CVE-2025-46802 Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

🗓️ 26 May 2025 15:10:38Reported by suseType 
cvelist
 cvelist
🔗 www.cve.org👁 14 Views

CVE-2025-46802 allows TTY temporary change to mode 0666, permitting PTY hijacking access.

Related
Affected
Refs
[
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Micro 5.3",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Micro 5.4",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Micro 5.5",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Server 15 SP6",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Desktop 15 SP6",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "screen",
    "product": "SUSE Linux Enterprise High Performance Computing 15 SP6",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "4.6.2-150000.5.8.1",
        "status": "affected",
        "version": "?",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 May 2025 15:18Current
CVSS 45.3
CVSS 3.16
EPSS0.00052
14