Lucene search

K
nvd[email protected]NVD:CVE-2005-3257
HistoryOct 18, 2005 - 10:02 p.m.

CVE-2005-3257

2005-10-1822:02:00
CWE-264
web.nvd.nist.gov
8

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.3

Confidence

High

EPSS

0

Percentile

0.4%

The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch2.6.12
OR
linuxlinux_kernelMatch2.6.14.4
VendorProductVersionCPE
linuxlinux_kernel2.6.12cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*
linuxlinux_kernel2.6.14.4cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.3

Confidence

High

EPSS

0

Percentile

0.4%