CVE-2007-2797

The CVE-2007-2797 issue affects xterm: Red Hat Enterprise Linux 4 (and derivatives such as CentOS 4) packages built with a bug that caused pseudo-terminal device files to be owned by the wrong group, enabling local users to write data to other users’ terminals. Public advisories (RHSA-2007:0701, ...

Plash sandbox protection bypass

It's possible to execute any command via /dev/tty device...

CVE-2007-1400

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2007-1400

Plash allows sandboxed processes to open /dev/tty via TIOCSTI, enabling local users to escape sandbox restrictions and send characters to a shell process on the same terminal to execute arbitrary commands. This CVE (CVE-2007-1400) is documented with a local-privilege/escalation impact and does no...

CVE-2007-1400

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

Ubuntu/Debian Apache 1.3.33/1.3.34 (CGI TTY) Local Root Exploit

Exploit for linux platform in category local exploits =============================================================== Ubuntu/Debian Apache 1.3.33/1.3.34 CGI TTY Local Root Exploit =============================================================== / :: Kristian Hermansen :: Date: 20070229 Description...

Ubuntu/Debian Apache 1.3.33/1.3.34 (CGI TTY) Local Root Exploit

No description provided by source. / :: Kristian Hermansen :: Date: 20070229 Description: Local attacker can influence Apache to direct commands into an open tty owned by user who started apache process, usually root. This results in arbitrary command execution. Affects: Apache 1.3.33/1.3.34 on...

Apache 1.3.341.3.33 (Ubuntu Debian) - CGI TTY Privilege Escalation

Apache 1.3.341.3.33 Ubuntu Debian - CGI TTY Privilege Escalation / :: Kristian Hermansen :: Date: 20070229 Description: Local attacker can influence Apache to direct commands into an open tty owned by user who started apache process, usually root. This results in arbitrary command execution...

Fedora Core 5 : xterm-223-1.fc5 (2007-024)

Mon Jan 8 2007 Miroslav Lichvar - 223-1.fc5 - update to 223 - use correct tty group 219048 - spec cleanup - Thu Nov 23 2006 Miroslav Lichvar - 213-2.fc5 - fix segfault when /etc/termcap is missing 201246 - Wed May 31 2006 Jason Vas Dias - 213-1 - Upgrade to upstream version 213 fixes bug 192627 -...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-95-1)

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...

Design/Logic Flaw

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

DEBIAN-CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

CVE-2006-0126 affects rxvt-unicode prior to 6.3 on platforms that use openpty and non-Unix pty devices (e.g., Linux and most BSDs). The issue is that tty device permissions are not preserved as intended, allowing local users to gain read and write access to the devices. The description specifies ...

[SA18301] rxvt-unicode TTY Device Insecure Permissions Vulnerability

TITLE: rxvt-unicode TTY Device Insecure Permissions Vulnerability SECUNIA ADVISORY ID: SA18301 VERIFY ADVISORY: http://secunia.com/advisories/18301/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: rxvt-unicode 5.x http://secunia.com/product/4777/ rxvt-unicode 6.x...

rxvt-unicode weak permissions

Insecure permissions for few tty devices...

rxvt-unicode -- restore permissions on tty devices

A rxvt-unicode changelog reports: SECURITY FIX: on systems using openpty, permissions were not correctly updated on the tty device and were left as world-readable and world-writable likely in original rxvt, too, and were not restored properly. Affected are only systems where non-unix ptys were us...

WIDCOMM Bluetooth Software < 3.0 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== WIDCOMM Bluetooth Software +include + +define UPUSHAPPNAME "BluePIMped v0.1" define BTSERVICE "OBEX" define OBEXPUSH 5 @@ -316,6 +325,9 @@ switch event case OBEXEVPROGRESS:...

CVE-2005-0403

initdev in ttyio.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service crash and possibly gain tty access via unknown attack vectors that trigger an access of ...