CVE-2013-6409: Medium severity Debian adequate vulnerability
Published Dec 7, 2013
·Updated
Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl.
Affected Software
18 affected components
Debian adequate<=0.8
Debian adequate=0.1
Debian adequate=0.1.1
Debian adequate=0.2
Debian adequate=0.2.1
Debian adequate=0.3.1
Debian adequate=0.4
Debian adequate=0.4.1
Debian adequate=0.4.2
Debian adequate=0.4.3
Debian adequate=0.4.4
Debian adequate=0.5
Debian adequate=0.5.1
Debian adequate=0.5.2
Debian adequate=0.5.3
Debian adequate=0.6
Debian adequate=0.7
Debian adequate=0.7.1
Event History
Dec 7, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6409?
CVE-2013-6409 is considered to be a medium severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2013-6409?
To fix CVE-2013-6409, upgrade Debian adequate to version 0.8.1 or later.
3
Who is affected by CVE-2013-6409?
CVE-2013-6409 affects local users running Debian adequate versions prior to 0.8.1 with root privileges.
4
What is the main vulnerability in CVE-2013-6409?
The main vulnerability in CVE-2013-6409 is the ability for local users to hijack the tty via the TIOCSTI ioctl.
5
What are the affected versions of Debian adequate in CVE-2013-6409?
Affected versions of Debian adequate in CVE-2013-6409 include all versions prior to 0.8.1.