CVE-2005-4890

2019-11-0419:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

23.2%

JSON

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via “su - user -c program”. The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

OSVersionArchitecturePackageVersionFilename
Debian12allshadow< 1:4.1.5-1shadow_1:4.1.5-1_all.deb
Debian11allshadow< 1:4.1.5-1shadow_1:4.1.5-1_all.deb
Debian10allshadow< 1:4.1.5-1shadow_1:4.1.5-1_all.deb
Debian999allshadow< 1:4.1.5-1shadow_1:4.1.5-1_all.deb
Debian13allshadow< 1:4.1.5-1shadow_1:4.1.5-1_all.deb
Debian12allsudo< 1.7.4p4sudo_1.7.4p4_all.deb
Debian11allsudo< 1.7.4p4sudo_1.7.4p4_all.deb
Debian10allsudo< 1.7.4p4sudo_1.7.4p4_all.deb
Debian999allsudo< 1.7.4p4sudo_1.7.4p4_all.deb
Debian13allsudo< 1.7.4p4sudo_1.7.4p4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	shadow	< 1:4.1.5-1	shadow_1:4.1.5-1_all.deb
Debian	11	all	shadow	< 1:4.1.5-1	shadow_1:4.1.5-1_all.deb
Debian	10	all	shadow	< 1:4.1.5-1	shadow_1:4.1.5-1_all.deb
Debian	999	all	shadow	< 1:4.1.5-1	shadow_1:4.1.5-1_all.deb
Debian	13	all	shadow	< 1:4.1.5-1	shadow_1:4.1.5-1_all.deb
Debian	12	all	sudo	< 1.7.4p4	sudo_1.7.4p4_all.deb
Debian	11	all	sudo	< 1.7.4p4	sudo_1.7.4p4_all.deb
Debian	10	all	sudo	< 1.7.4p4	sudo_1.7.4p4_all.deb
Debian	999	all	sudo	< 1.7.4p4	sudo_1.7.4p4_all.deb
Debian	13	all	sudo	< 1.7.4p4	sudo_1.7.4p4_all.deb

0.001 Low

EPSS

Percentile

23.2%

JSON

Related for DEBIANCVE:CVE-2005-4890