VULNERABILITY INTELLIGENCE

CVE-2005-4890

CVSS score7.8 HIGH
EPSS probability0.63%
CISA KEVNot currently listed
Published2019-11-04
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references