CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

DEBIAN-CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

The CVE-2011-1408 entry applies to ikiwiki prior to version 3.20110608. The vulnerability enables remote attackers to hijack the root user’s tty and perform symlink attacks. From the description, the attack is remote and does not require authentication, with network access identified as the attac...

PostShell - Post Exploitation Bind/Backconnect Shell

PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. Why not use a traditional Backconnect/Bind Shell? PostShell allows...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

CVE-2016-10810

In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...

CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

Design/Logic Flaw

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

Design/Logic Flaw

In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...

Command injection

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10810

Summary: CVE-2016-10810 affects cPanel prior to 57.9999.54, where the script /scripts/maildir_converter exposes a TTY to an unprivileged process (SEC‑115). The issue is documented across multiple sources (NVD entry and Red Hat, CNVD, etc.). Impact details: CVSS metrics in the NVD entry indicate a...

CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

Code injection

cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...

Memory corruption

DISPUTED An issue was discovered in coninsertunipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue...

CVE-2019-12379

The connected Nessus UNPATCHED_CVE_2019_12379 entry confirms CVE-2019-12379 affects Linux kernel code path con_insert_unipair in drivers/tty/vt/consolemap.c (up to kernel 5.1.5) with a memory leak in an ENOMEM/kmalloc scenario. The description explicitly notes this issue is disputed as an actual ...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1500)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The IPv6 DCCP implementation in the Linux kernel mishandles inheritance, which allows local users to cause a denial of...