CVE-2007-1400

Published: Mar 10, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.

Affected (1)

Products: Plesh: Plesh

Plesh

1 product

Plesh

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Plesh Plesh	All versions

References (12)

http://lists.gnu.org/archive/html/plash/2007-03/msg00000.html

Source: cve@mitre.org

http://plash.beasts.org/wiki/PlashIssues/TtyVulnerability

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/24498

Source: cve@mitre.org

http://www.osvdb.org/32598

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/22892

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0909

Source: cve@mitre.org

http://lists.gnu.org/archive/html/plash/2007-03/msg00000.html