CVE Vulnerabilities

CVE-2011-1496

Published: Apr 18, 2011 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Affected Software

Name Vendor Start Version End Version
Tmux Nicholas_marriott 1.3 (including) 1.3 (including)
Tmux Nicholas_marriott 1.4 (including) 1.4 (including)
Tmux Ubuntu karmic *
Tmux Ubuntu lucid *
Tmux Ubuntu maverick *
Tmux Ubuntu natty *
Tmux Ubuntu upstream *

References