DLA-638-1 policycoreutils - security update

Bulletin has no description...

PT-2017-7750

Name of the Vulnerable Software and Affected Versions Linux Containers LXC versions prior to 2016-02-22 Description An issue in Linux Containers allows a non-privileged session to escape to the parent session. This is achieved by using the TIOCSTI ioctl to push characters into the terminal's inpu...

PT-2016-3356

Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The issue is related to a lack of access control during user authentication in the util-linux package, which can be exploited to gain access to confidential data, compromise data integrity...

PT-2016-3438

Name of the Vulnerable Software and Affected Versions pkexec versions affected versions not specified Description The issue allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. This is related to the use of...

PT-2019-6480

Name of the Vulnerable Software and Affected Versions shadow versions 4.0 through 4.1.4 sudo versions 1.0 through 1.7.3 Description The issue allows for a possible tty hijacking via "su - user -c program". This can be exploited by using the TIOCSTI ioctl to push characters into the input buffer,...

CVE-2006-7098

The Debian GNU/Linux 033-FNOSETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

DEBIAN-CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409: Undefined Security Weakness

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

PT-2013-6035

Name of the Vulnerable Software and Affected Versions Debian adequate version prior to 0.8.1 Description The issue allows local users to potentially gain privileges by hijacking the tty when the software is run by root with the --user option, utilizing the TIOCSTI ioctl. Recommendations For...

Plash沙盒中进程TIOCSTI ioctl()权限提升漏洞

Plash是用于在沙盒中运行GNU/Linux程序的系统，以使程序只能获得最低权限。 Plash没有正确的限制沙盒中的进程通过TIOCSTI ioctl向终端的文件描述符插入字符，如果该终端上运行着shell的话，恶意的沙盒中进程就可能以该shell的权限执行任意命令。 Plash 1.17 临时解决方法： 代理访问stdin/stdout/stderr，通过cat管道传输： cat | pola-run ... 2&1 | cat 厂商补丁： Plash ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Design/Logic Flaw

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2007-1400

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2007-1400

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2007-1400

Plash allows sandboxed processes to open /dev/tty via TIOCSTI, enabling local users to escape sandbox restrictions and send characters to a shell process on the same terminal to execute arbitrary commands. This CVE (CVE-2007-1400) is documented with a local-privilege/escalation impact and does no...

CVE-2007-1400: Undefined Security Weakness

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2006-7098

The Debian GNU/Linux 033-FNOSETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl...