Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2024-28085
Description:wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
Test IDs: 1.3.6.1.4.1.25623.1.0.856065   1.3.6.1.4.1.25623.1.1.2.2024.2320   1.3.6.1.4.1.25623.1.1.2.2024.2254   1.3.6.1.4.1.25623.1.1.2.2024.1581   1.3.6.1.4.1.25623.1.1.10.2024.0112   1.3.6.1.4.1.25623.1.1.2.2024.1995   1.3.6.1.4.1.25623.1.0.856064   1.3.6.1.4.1.25623.1.1.1.1.2024.5650   1.3.6.1.4.1.25623.1.0.856066   1.3.6.1.4.1.25623.1.1.2.2024.2682   1.3.6.1.4.1.25623.1.1.2.2024.1951   1.3.6.1.4.1.25623.1.1.2.2024.1604   1.3.6.1.4.1.25623.1.1.2.2024.1978   1.3.6.1.4.1.25623.1.1.4.2024.1170.1   1.3.6.1.4.1.25623.1.1.2.2024.2230   1.3.6.1.4.1.25623.1.1.12.2024.6719.1   1.3.6.1.4.1.25623.1.1.12.2024.6719.2   1.3.6.1.4.1.25623.1.1.4.2024.1106.1   1.3.6.1.4.1.25623.1.1.4.2024.1171.1   1.3.6.1.4.1.25623.1.1.2.2024.1848   1.3.6.1.4.1.25623.1.1.2.2024.1827   1.3.6.1.4.1.25623.1.1.2.2024.2174   1.3.6.1.4.1.25623.1.1.13.2024.088.02   1.3.6.1.4.1.25623.1.1.18.2.2024.1943.1   1.3.6.1.4.1.25623.1.1.2.2024.2340   1.3.6.1.4.1.25623.1.1.2.2024.2201   1.3.6.1.4.1.25623.1.1.2.2024.2013   1.3.6.1.4.1.25623.1.1.4.2024.1169.1   1.3.6.1.4.1.25623.1.1.2.2024.2648  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2024-28085
https://github.com/skyler-ferrante/CVE-2024-28085
https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/
https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
https://www.openwall.com/lists/oss-security/2024/03/27/5
https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html
http://www.openwall.com/lists/oss-security/2024/03/27/5
http://www.openwall.com/lists/oss-security/2024/03/27/6
http://www.openwall.com/lists/oss-security/2024/03/27/7
http://www.openwall.com/lists/oss-security/2024/03/27/8
http://www.openwall.com/lists/oss-security/2024/03/27/9
http://www.openwall.com/lists/oss-security/2024/03/28/1
http://www.openwall.com/lists/oss-security/2024/03/28/3
http://www.openwall.com/lists/oss-security/2024/03/28/2




© 1998-2025 E-Soft Inc. All rights reserved.