CVE-2013-6876 - CVE House
Back to Database
Status published High CVE-2013-6876

The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in...

Vulnerability Description

The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6876

Credits & Attribution

No credits recorded in the NVD database.

References

More from s3dvt project

View All →
CVE-2014-1226
The pipe_init_terminal function in main.c in s3dvt allows local users...
High 7.8

Affected Vendor

s3dvt project

View all reports →

Affected Software

s3dvt
Vulnerable Versions:
0

Timeline

Official Publish: April 6th, 2018
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.