VULNERABILITY INTELLIGENCE

CVE-2007-1400

CVSS score6.9 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2007-03-10
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.

Primary references