CVEvulnerability
CVE-2005-0839
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.
Affected configurations
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
• linux linux kernel 2.6.8
• linux linux kernel 2.6.8.1
• linux linux kernel 2.6.9
• linux linux kernel 2.6.10
References
- http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ linux.bkbits.net:8080
- http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html www.mail-archive.com
- http://www.redhat.com/support/errata/RHSA-2005-366.html www.redhat.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460 oval.cisecurity.org
- http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ linux.bkbits.net:8080
- http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html www.mail-archive.com
- http://www.redhat.com/support/errata/RHSA-2005-366.html www.redhat.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460 oval.cisecurity.org