CVE-2008-1845

The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option.

Link	Resource
http://www.mirbsd.org/mksh.htm#clog
http://www.securityfocus.com/bid/28768
http://secunia.com/advisories/29803	Vendor Advisory
http://www.osvdb.org/44365
https://exchange.xforce.ibmcloud.com/vulnerabilities/41794

Configuration 1

cpe:2.3:o:mirbsd:miros:*:c:*:*:*:*:*:* cpe:2.3:o:mirbsd:miros:33:b:*:*:*:*:*:* cpe:2.3:o:mirbsd:miros:33:a:*:*:*:*:*:*

---

Published : 2008-04-16 05:05

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1845

Mitre link : CVE-2008-1845

No products.

NVD-CWE-Other