CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

CVE-2005-4890

The CVE-2005-4890 entry describes a local vulnerability where tty hijacking is possible in shadow 4.x (before 4.1.5) and sudo 1.x (before 1.7.4) via the command path "su - user -c program". Attacker can use the TIOCSTI ioctl to inject characters into the input buffer, allowing the user session to...

CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

CVE-2005-4890: Improper Input Validation

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

PT-2019-6480

Name of the Vulnerable Software and Affected Versions shadow versions 4.0 through 4.1.4 sudo versions 1.0 through 1.7.3 Description The issue allows for a possible tty hijacking via "su - user -c program". This can be exploited by using the TIOCSTI ioctl to push characters into the input buffer,...

PT-2013-6035

Name of the Vulnerable Software and Affected Versions Debian adequate version prior to 0.8.1 Description The issue allows local users to potentially gain privileges by hijacking the tty when the software is run by root with the --user option, utilizing the TIOCSTI ioctl. Recommendations For...

FreeBSD : ikiwiki -- tty hijacking via ikiwiki-mass-rebuild (3145faf1-974c-11e0-869e-000c29249b2e)

The IkiWiki development team reports : Ludwig Nussel discovered a way for users to hijack root's tty when ikiwiki-mass-rebuild was run. Additionally, there was some potential for information disclosure via symlinks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

ikiwiki -- tty hijacking via ikiwiki-mass-rebuild

The IkiWiki development team reports: Ludwig Nussel discovered a way for users to hijack root's tty when ikiwiki-mass-rebuild was run. Additionally, there was some potential for information disclosure via symlinks...