pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - | |
| References | () http://secunia.com/advisories/55113 - | |
| References | () http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 - | |
| References | () http://www.ubuntu.com/usn/USN-2985-1 - | |
| References | () http://www.ubuntu.com/usn/USN-2985-2 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=976408 - Patch | |
| References | () https://security.gentoo.org/glsa/201503-04 - | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=15755 - Patch | |
| References | () https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html - |
Information
Published : 2013-10-09 22:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-2207
Mitre link : CVE-2013-2207
CVE.ORG link : CVE-2013-2207
JSON object : View
Products Affected
gnu
- glibc
fedoraproject
- fedora
CWE
CWE-264
Permissions, Privileges, and Access Controls