MEDIUM
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option
Published Apr 18, 2011
4.6
MEDIUMCVSS 2.0
EPSS 0.95%
Description
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
Affected products
No data.
OR
- 1.3
- 1.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (12)
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058367.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058452.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058548.html vendor-advisoryx_refsource_FEDORA
- http://secunia.com/advisories/44081 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/44239 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.debian.org/security/2011/dsa-2212 vendor-advisoryx_refsource_DEBIAN
- http://www.exploit-db.com/exploits/17147 exploitx_refsource_EXPLOIT-DB
- http://www.securityfocus.com/bid/47283 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2011/0897 vdb-entryx_refsource_VUPENVendor Advisory
- http://www.vupen.com/english/advisories/2011/1002 vdb-entryx_refsource_VUPENVendor Advisory
- http://www.vupen.com/english/advisories/2011/1015 vdb-entryx_refsource_VUPENVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66693 vdb-entryx_refsource_XF
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Apr 18, 2011
Updated Aug 6, 2024
Reserved Mar 21, 2011
Link CVE-2011-1496
CISA Vulnrichment
Updated n/a