CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Date published : 2011-04-18

http://www.securityfocus.com/bid/47283

http://www.debian.org/security/2011/dsa-2212