CVE-2005-3257 Privilege escalation in n/a
Local attackers can exploit the KDSKBSENT ioctl to modify other users' key bindings and escalate privileges within the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-3257?
CVE-2005-3257 is a medium-severity vulnerability in Linux kernel, published on 18 Oct 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
Weakness: CWE-264
Which versions are affected by CVE-2005-3257?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2005-3257?
Apply the vendor's patch.
Is CVE-2005-3257 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-3257 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-j6qw-vjcv-x9q7.