CVE-2005-4890

Опубликовано: 04 нояб. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

Ссылки

http://www.openwall.com/lists/oss-security/2012/11/06/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/05/20/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/28/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/29/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/20/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/21/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/15/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/25/6
Exploit
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2005-4890
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2005-4890
Issue Tracking
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2005-4890
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/11/06/8
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/05/20/3
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/28/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/29/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/20/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/21/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/12/15/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/25/6
Exploit
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2005-4890
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:debian:shadow:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 4.1.5 (включая)

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

Версия от 1.3.0 (включая) до 1.7.4 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.0012

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2005-4890

CVSS3: 7.8

ubuntu

около 6 лет назад

CVE-2005-4890

redhat

больше 21 года назад

CVE-2005-4890

CVSS3: 7.8

debian

около 6 лет назад

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo ...

GHSA-3p48-pw9r-4325

CVSS3: 7.8

github

больше 3 лет назад

EPSS

Процентиль: 32%

0.0012

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20