CVE-2005-3257

Linux Kernel - Access Control

Title source: rule

Description

The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Rudolf Polzer · textlocallinux

https://www.exploit-db.com/exploits/26353

View Code ZIP pw:eip

References (18)

[Exploit, Vendor Advisory] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113

[Vendor Advisory] http://secunia.com/advisories/17226

[Vendor Advisory] http://secunia.com/advisories/17826

[Vendor Advisory] http://secunia.com/advisories/17995

[Vendor Advisory] http://secunia.com/advisories/18203

[Vendor Advisory] http://secunia.com/advisories/19185

[Vendor Advisory] http://secunia.com/advisories/19369

[Vendor Advisory] http://secunia.com/advisories/19374

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2005:218

[Vendor Advisory] https://usn.ubuntu.com/231-1/

[Vendor Advisory] http://rhn.redhat.com/errata/RHBA-2007-0304.html

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/15122

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1017

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1018

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615

Scores

EPSS 0.0039

EPSS Percentile 59.4%

Classification

CWE

CWE-264

Status draft

Affected Products (2)

linux/linux_kernel

linux/linux_kernel

Timeline

Published Oct 18, 2005

Tracked Since Feb 18, 2026