Files
CVEs-PoC/2006/CVE-2006-7098.md
T
2025-09-29 21:09:30 +02:00

779 B

CVE-2006-7098

Description

The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl.

POC

Reference

No PoCs from references.

Github