Debian/mksh: unknown

The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal

Action: Upgrade mksh to 33.4-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1845#Debian:14/mksh
• https://security-tracker.debian.org/tracker/CVE-2008-1845

published 2008-04-16T17:05:00Z · modified 2026-10-23T17:47:51.402109732Z · JSON