CVEvulnerability
CVE-2013-6409
6.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl.
Affected configurations
• debian adequate (<= 0.8)
• debian adequate 0.1
• debian adequate 0.1.1
• debian adequate 0.2
• debian adequate 0.2.1
• debian adequate 0.3.1
• debian adequate 0.4
• debian adequate 0.4.1
• debian adequate 0.4.2
• debian adequate 0.4.3
• debian adequate 0.4.4
• debian adequate 0.5
• debian adequate 0.5.1
• debian adequate 0.5.2
• debian adequate 0.5.3
• debian adequate 0.6
• debian adequate 0.7
• debian adequate 0.7.1
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730691 bugs.debian.org
- http://www.securityfocus.com/bid/63994 www.securityfocus.com
- https://bitbucket.org/jwilk/adequate/raw/tip/debian/changelog bitbucket.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730691 bugs.debian.org
- http://www.securityfocus.com/bid/63994 www.securityfocus.com
- https://bitbucket.org/jwilk/adequate/raw/tip/debian/changelog bitbucket.org