• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MirBSD Korn Shell Local Privilege Escalation Vulnerability

MirBSD Korn Shell (mksh) is prone to a local privilege-escalation vulnerability because the application fails to properly ensure that the origin of terminal input is secure.

Successfully exploiting this issue allows local attackers to execute arbitrary shell commands with the privileges of other users running the affected shell.

Versions prior to mksh R33d are vulnerable.