CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.2 UNKNOWN
LOCAL
HIGH
AV:L/AC:H/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
debianadequate
𝑥
≤ 0.8
debianadequate
0.1
debianadequate
0.1.1
debianadequate
0.2
debianadequate
0.2.1
debianadequate
0.3.1
debianadequate
0.4
debianadequate
0.4.1
debianadequate
0.4.2
debianadequate
0.4.3
debianadequate
0.4.4
debianadequate
0.5
debianadequate
0.5.1
debianadequate
0.5.2
debianadequate
0.5.3
debianadequate
0.6
debianadequate
0.7
debianadequate
0.7.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
adequate
bullseye
0.15.6
fixed
bookworm
0.15.9~deb12u1
fixed
sid
0.17
fixed
trixie
0.17
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adequate
trusty
dne
saucy
ignored
raring
ignored
quantal
dne
precise
dne
lucid
dne
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730691
http://www.securityfocus.com/bid/63994
https://bitbucket.org/jwilk/adequate/raw/tip/debian/changelog
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730691
http://www.securityfocus.com/bid/63994
https://bitbucket.org/jwilk/adequate/raw/tip/debian/changelog