Description
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.
References
- 20030508 ltris-and-slashem-tty possible trouble mailing-list
- slashem-tty-insecure-permissions(11979) vdb-entry
- 20030509 ltris-and-slashem-tty possible trouble mailing-list