CVE-2015-6565
OpenSSH 6.8-6.9 - Denial of Service via TTY Device Permission Issue
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-6565. PoCs published by Federico Bento.
AI-analyzed exploit summary This exploit leverages a race condition in OpenSSH 6.8-6.9 to gain local privilege escalation by manipulating PTY slave devices. It copies a SUID shell to /tmp/sh, allowing the attacker to escalate to root.
Description
sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.
Exploits (1)
This exploit leverages a race condition in OpenSSH 6.8-6.9 to gain local privilege escalation by manipulating PTY slave devices. It copies a SUID shell to /tmp/sh, allowing the attacker to escalate to root.