CVE-2013-6876 The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and ear...
HighCVSS 7.8
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/s3d(Debian:12) | < 0.2.2-9 | 0.2.2-9 |
| debian/s3d(Debian:13) | < 0.2.2-9 | 0.2.2-9 |
| debian/s3d(Debian:14) | < 0.2.2-9 | 0.2.2-9 |
| s3dvt project s3dvt | <= 0.2.2 | No fix listed |
References
- Debian Security Tracker CVE-2013-6876 vendor-advisory
- hmarco.org third-party-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- 20140604 CVE-2013-6876 s3dvt Root shell mailing-list third-party-advisory
- [oss-security] 20140603 CVE-2013-6876 s3dvt Root shell mailing-list third-party-advisory
- 20140602 [FD] CVE-2013-6876 s3dvt Root shell mailing-list
- 20140603 CVE-2013-6876 s3dvt Root shell mailing-list
- 67789 third-party-advisory vdb-entry