CVE-2013-6876

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.htmlThird Party Advisory
http://packetstormsecurity.com/files/126887/s3dvt-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2014/Jun/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/03/11Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/532258/100/0/threaded
http://www.securityfocus.com/archive/1/532276/100/0/threaded
http://www.securityfocus.com/bid/67789Third Party Advisory, VDB Entry
http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.htmlThird Party Advisory
http://packetstormsecurity.com/files/126887/s3dvt-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2014/Jun/10Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/06/03/11Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/532258/100/0/threaded
http://www.securityfocus.com/archive/1/532276/100/0/threaded
http://www.securityfocus.com/bid/67789Third Party Advisory, VDB Entry

Timeline

Published: Apr 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-68779.3Heap-based buffer overflow in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allows remote atta CVE-2013-68786.1Cross-site scripting (XSS) vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to injec CVE-2013-68795.3The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to com CVE-2013-68806.1Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site CVE-2013-688110.0CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacte CVE-2013-68824.3Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote CVE-2013-68836.8Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers t CVE-2013-688410.0The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allo CVE-2013-68854.7The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined CVE-2013-68867.2RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncser CVE-2013-68876.4OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division CVE-2013-68887.5Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.