CVEvulnerability
CVE-2005-4890
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-11-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
Affected configurations
• debian shadow (>= 4.0.0 <= 4.1.5)
• sudo project sudo (>= 1.3.0 <= 1.7.4)
• debian debian linux 8.0
• debian debian linux 9.0
• debian debian linux 10.0
• redhat enterprise linux 4
• redhat enterprise linux 5
• redhat enterprise linux 6.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.openwall.com/lists/oss-security/2012/11/06/8 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/05/20/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/11/28/10 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/11/29/5 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/10/20/9 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/10/21/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/12/15/5 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/25/6 Exploit, Mailing List, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2005-4890 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890 Issue Tracking, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2005-4890 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/11/06/8 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/05/20/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/11/28/10 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2013/11/29/5 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/10/20/9 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/10/21/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2014/12/15/5 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/25/6 Exploit, Mailing List, Third Party Advisory
- https://access.redhat.com/security/cve/cve-2005-4890 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890 Issue Tracking, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2005-4890 Third Party Advisory