CVE-2011-1496 tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
MediumCVSS 4.6
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nicholas marriott tmux | = 1.3 | No fix listed |
| nicholas marriott tmux | = 1.4 | No fix listed |
| debian/tmux(Debian:12) | < 1.4-6 | 1.4-6 |
| debian/tmux(Debian:13) | < 1.4-6 | 1.4-6 |
| debian/tmux(Debian:14) | < 1.4-6 | 1.4-6 |
References
- Debian Security Tracker CVE-2011-1496 vendor-advisory
- bugs.debian.org issue-tracking
- FEDORA-2011-5167 vendor-advisory
- FEDORA-2011-5156 vendor-advisory
- FEDORA-2011-5486 vendor-advisory
- 44081 third-party-advisory vendor-advisory
- 44239 third-party-advisory vendor-advisory
- DSA-2212 vendor-advisory
- 17147 exploit
- 47283 vdb-entry
- ADV-2011-0897 vdb-entry vendor-advisory
- ADV-2011-1002 vdb-entry vendor-advisory
- ADV-2011-1015 vdb-entry vendor-advisory
- tmux-setgid-privilege-escalation(66693) vdb-entry