Main
Vulnerability Database
Exploits
ID:4403 - Exploit for Permissions, Privileges, and Access Controls in tmux - CVE-2011-1496
ID:4403 - Exploit for Permissions, Privileges, and Access Controls in tmux - CVE-2011-1496
Published: August 11, 2020
Vulnerability identifier: #VU45121
Vulnerability risk: Medium
CVE-ID: CVE-2011-1496
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
tmux
tmux
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
Remediation
Install update from vendor's website.