CVE-2011-1496
nicholas marriott tmux: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.
tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nicholas_marriott:tmux
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058367.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058452.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058548.html
- http://secunia.com/advisories/44081
- http://secunia.com/advisories/44239