CVE-2005-4890 vulnerability in Debian and Other Products
Published on November 4, 2019
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process.
Products Associated with CVE-2005-4890
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2005-4890 are published in these products:
Affected Versions
Red Hat shadow:- Version 4.x before 4.1.5 is affected.
- Version 1.x before 1.7.4 is affected.
Exploit Probability
EPSS
0.14%
Percentile
33.68%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.