CVE-2005-4890: Input Validation
Quoting first paragraph from [1]: https://bugzilla.redhat.com/showbug.cgi?id=173008
for issue description: ====================== When starting a program via "su - user -c program" the user session can escape to the parent session by using the TIOCSTI ioctl to push characters into the input buffer. This allows for example a non-root session to push "chmod 666 /etc/shadow" or similarly bad commands into the input buffer such that after the end of the session they are executed.
References: [1] https://bugzilla.redhat.com/showbug.cgi?id=173008 [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628843
Other sources
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4890?
CVE-2005-4890 has a moderate severity rating due to its potential exploitation in TIOCSTI attacks.
How do I fix CVE-2005-4890?
To fix CVE-2005-4890, update affected packages such as shadow and sudo to the specified remedied versions.
Which software versions are affected by CVE-2005-4890?
CVE-2005-4890 affects various versions of the Debian 'shadow' and 'sudo' packages, as well as certain versions of Red Hat Enterprise Linux.
What type of vulnerability is CVE-2005-4890?
CVE-2005-4890 is a privilege escalation vulnerability associated with improper handling of signals.
Is CVE-2005-4890 still a concern in modern systems?
While CVE-2005-4890 is older, systems running outdated versions of the affected software remain at risk and should be updated.