NVD

Id
1785  
Name
CVE-2008-1845  
Description
The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty"s I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-16  
Modified Date
2008-09-05  
Seq
2008-1845  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11663 1785 CVE-2008-1845 http://www.mirbsd.org/mksh.htm#clog  View
11664 1785 CVE-2008-1845 28768  View
11665 1785 CVE-2008-1845 mirbsd-tty-privilege-escalation(41794)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49037 JVNDB-2008-004347 MirOS 用の Korn シェルにおける権限を取得される脆弱性 MirOS 用の Korn シェルは、新規ターミナル内の mksh を起動する際に tty の I/O のデータを消去しないため、権限を取得される脆弱性が存在します。 CVE-2008-1845 31958 CVE-2008-1845 1785 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004347.html 2008-04-16 2012-09-25 View