CVE-2011-1496

CVE-2011-1496 affects tmux 1.3 and 1.4. The issue is that tmux does not drop group privileges correctly, enabling a local user to gain utmp group privileges by supplying a crafted filename to the -S option. The vulnerability is confirmed by multiple advisories (Debian DSA-2212-1 and Fedora update...