What is CVE-2013-6409?

CVE-2013-6409 is a vulnerability in Debian Adequate, classified under CWE-264. Published 2013-12-07.

Is CVE-2013-6409 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Debian Adequate

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl.

EPSS: 0.003 (23.0th percentile) — read the EPSS interpretation.

Affected products

Debian Adequate — versions 0.1, 0.1.1, 0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

ARPSyndicate/cvemon
hartwork/antijack

References

secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-6409?: CVE-2013-6409 is a vulnerability in Debian Adequate, classified under CWE-264. Published 2013-12-07.
Is CVE-2013-6409 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.