CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: pt_chown in the glibc package before 2.19-18+deb8u4 on debian jessie; the elibc package before 2.15-0ubuntu10.14 on ubuntu 12.04 lts and before 2.19-0ubuntu6.8 on ubuntu 14.04 lts; and the glibc package before 2.21-0ubuntu4.2 on ubuntu 15.10 and before 2.23-0ubuntu1 on ubuntu 16.04 lts and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk.  note: this is not considered a vulnerability in the upstream gnu c library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-03-14
Last Modified Date: 2016-11-28
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: pt_chown in the glibc package before 2.19-18+deb8u4 on debian jessie; the elibc package before 2.15-0ubuntu10.14 on ubuntu 12.04 lts and before 2.19-0ubuntu6.8 on ubuntu 14.04 lts; and the glibc package before 2.21-0ubuntu4.2 on ubuntu 15.10 and before 2.23-0ubuntu1 on ubuntu 16.04 lts and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk.  note: this is not considered a vulnerability in the upstream gnu c library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-03-14
Last Modified Date: 2016-11-28
assistant