CVE-2007-1400 Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal...
MediumCVSS 6.9
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| plesh | All versions | No fix listed |
References
- [plash] 20070301 TTY ioctl() vulnerability mailing-list
- plash.beasts.org patch vendor-advisory
- 24498 third-party-advisory
- 32598 patch vdb-entry vendor-advisory
- 22892 vdb-entry
- ADV-2007-0909 vdb-entry