ID:3710 - Exploit for Permissions, Privileges, and Access Controls in OpenSSH - CVE-2015-6565

Link to public exploit:

Vulnerability description

The vulnerability allows a local non-authenticated attacker to execute arbitrary code.

sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.

Remediation