Main
Vulnerability Database
Exploits
ID:10287 - Exploit for Security restrictions bypass in Linux kernel - CVE-2005-3257
ID:10287 - Exploit for Security restrictions bypass in Linux kernel - CVE-2005-3257
Published: August 2, 2024
Vulnerability identifier: #VU95243
Vulnerability risk: Low
CVE-ID: CVE-2005-3257
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to read and manipulate data.
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
Remediation
Install update from vendor's repository.