CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

DEBIAN-CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

Design/Logic Flaw

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

CVE-2011-1496

CVE-2011-1496 affects tmux 1.3 and 1.4. The issue is that tmux does not drop group privileges correctly, enabling a local user to gain utmp group privileges by supplying a crafted filename to the -S option. The vulnerability is confirmed by multiple advisories (Debian DSA-2212-1 and Fedora update...

CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

PT-2011-1028

Name of the Vulnerable Software and Affected Versions tmux versions 1.3 through 1.4 Description The issue allows local users to gain utmp group privileges, potentially leading to disruption of confidentiality, integrity, and availability of protected information. A local attacker can exploit this...

CVE-2011-1496: Undefined Security Weakness

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option...

Fedora 14 : tmux-1.4-3.fc14 (2011-5167)

tmux didn't drop group privileges correctly in all cases. This is fixed by using an updated patch originating from the debian tmux package. Fixes RHBZ 694563, CVE-2011-1496 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

[SECURITY] Fedora 14 Update: tmux-1.4-3.fc14

tmux is a "terminal multiplexer." It enables a number of terminals or windows to be accessed and controlled from a single terminal. tmux is intended to be a simple, modern, BSD-licensed alternative to programs such as GNU Screen...

tmux '-S' Option Incorrect SetGID Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits --------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerabilit...

[BSA-032] Security update for tmux

Daniel Danner discovered that tmux, a terminal multiplexer, is not properly dropping group privileges. Due to a patch introduced by Debian, when invoked with the -S option, tmux is not dropping permissions obtained through its setgid installation CVE-2011-1496. For the lenny-backports distributio...

tmux 1.31.4 - -S Option Incorrect SetGID Privilege Escalation

tmux 1.31.4 - -S Option Incorrect SetGID Privilege Escalation --------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation...

tmux 1.3 / 1.4 Privilege Escalation

--------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability Date: 11.04.2011 Author: ph0x90bic Software Link:...

tmux 1.3/1.4 - '-S' Option Incorrect SetGID Privilege Escalation

--------------------------------------- | Team ph0x90bic proudly presents | | tmux -S 1.3/1.4 local utmp exploit | --------------------------------------- Exploit Title: tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability Date: 11.04.2011 Author: ph0x90bic Software Link:...

[SECURITY] [DSA 2212-1] tmux security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2212-1 [email protected] http://www.debian.org/security/ Nico Golde April 7, 2011 http://www.debian.org/security/faq -...

Debian DSA-2212-1 : tmux - privilege escalation

Daniel Danner discovered that tmux, a terminal multiplexer, is not properly dropping group privileges. Due to a patch introduced by Debian, when invoked with the -S option, tmux is not dropping permissions obtained through its setgid installation. The oldstable distribution lenny is not affected ...