suse · CVE-2005-4890

Quick triage

Priority: medium Published: 2021-05-30 12:34:38 UTC Updated: 2023-12-09 02:19:53 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2005-4890 severity moderate: SUSE including 1 source package names (coreutils), 1 product×package rows across 1 product lines (SUSE Linux Enterprise Point of Service 11 SP3): Known Not Affected 1.

Description:

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

cvelogic Threat Intelligence