CVE-2017-2636

A race condition flaw was found in the NHLDC Linux kernel driver when accessing nhdlc.tbuf list that can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device could use this flaw to increase their privileges on the system. Mitigation The nhdlc kern...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

DEBIAN-CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

The CVE-2011-1408 entry applies to ikiwiki prior to version 3.20110608. The vulnerability enables remote attackers to hijack the root user’s tty and perform symlink attacks. From the description, the attack is remote and does not require authentication, with network access identified as the attac...

PostShell - Post Exploitation Bind/Backconnect Shell

PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. Why not use a traditional Backconnect/Bind Shell? PostShell allows...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

CVE-2016-10810

In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...

CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

Design/Logic Flaw

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

Design/Logic Flaw

In cPanel before 57.9999.54, /scripts/maildirconverter exposed a TTY to an unprivileged process SEC-115...

Command injection

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10811

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10810

Summary: CVE-2016-10810 affects cPanel prior to 57.9999.54, where the script /scripts/maildir_converter exposes a TTY to an unprivileged process (SEC‑115). The issue is documented across multiple sources (NVD entry and Red Hat, CNVD, etc.). Impact details: CVSS metrics in the NVD entry indicate a...

CVE-2016-10809

In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process SEC-114...

CVE-2016-10808

In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs SEC-113...

Code injection

cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...

Memory corruption

DISPUTED An issue was discovered in coninsertunipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue...