tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability
BID:47283
Info
tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability
| Bugtraq ID: | 47283 |
| Class: | Design Error |
| CVE: |
CVE-2011-1496 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 08 2011 12:00AM |
| Updated: | May 07 2015 05:09PM |
| Credit: | Daniel Danner |
| Vulnerable: |
tmux tmux 1.4 tmux tmux 1.3 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 |
| Not Vulnerable: | |
Discussion
tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability
tmux is prone to a local privilege-escalation vulnerability because it fails to properly drop group permissions obtained through setGID.
Local attackers may exploit this issue to gain elevated privileges; other attacks may also be possible.
tmux is prone to a local privilege-escalation vulnerability because it fails to properly drop group permissions obtained through setGID.
Local attackers may exploit this issue to gain elevated privileges; other attacks may also be possible.
Exploit / POC
tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability
An attacker may exploit this issue using readily available tools.
An attacker may exploit this issue using readily available tools.
Solution / Fix
tmux '-S' Option Incorrect SetGID Local Privilege Escalation Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.