CVE-2014-1226

EUVD-2014-1306
The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier.  NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
s3dvt_projects3dvt
𝑥
≤ 0.2.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
s3d
bookworm
0.2.2.1-5
fixed
bullseye
0.2.2.1-3
fixed
sid
0.2.2.1-6
fixed
trixie
0.2.2.1-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
s3d
lucid
ignored
precise
ignored
saucy
ignored
trusty
dne
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
Common Weakness Enumeration
References
http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html
http://seclists.org/fulldisclosure/2014/Jun/12
http://www.openwall.com/lists/oss-security/2014/06/03/13
http://www.securityfocus.com/archive/1/532278/100/0/threaded
http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html
http://seclists.org/fulldisclosure/2014/Jun/12
http://www.openwall.com/lists/oss-security/2014/06/03/13
http://www.securityfocus.com/archive/1/532278/100/0/threaded