CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program"

published November 4, 2019

CVSS
—
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.2th percentile
Published
2019-11-04T18:38Z
EPSS history
Timeline
  • 04 NOV 18:38Z
    There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program"
    cvelistv5