{"id":"UBUNTU-CVE-2013-6876","details":"The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier.  NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed.","modified":"2025-07-16T07:17:10.884133Z","published":"2018-04-06T17:29:00Z","withdrawn":"2025-07-18T16:42:57Z","upstream":["CVE-2013-6876"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2013-6876"},{"type":"REPORT","url":"http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.html"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2014/06/03"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2013-6876"}],"affected":[{"package":{"name":"s3d","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/s3d@0.2.2-9?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-9"}]}],"versions":["0.2.2-8"],"ecosystem_specific":{"binaries":[{"binary_name":"dotmcp","binary_version":"0.2.2-9"},{"binary_name":"kism3d","binary_version":"0.2.2-9"},{"binary_version":"0.2.2-9","binary_name":"libs3d-dev"},{"binary_name":"libs3d2","binary_version":"0.2.2-9"},{"binary_name":"libs3dw-dev","binary_version":"0.2.2-9"},{"binary_name":"libs3dw2","binary_version":"0.2.2-9"},{"binary_name":"meshs3d","binary_version":"0.2.2-9"},{"binary_name":"s3d","binary_version":"0.2.2-9"},{"binary_name":"s3d-data","binary_version":"0.2.2-9"},{"binary_name":"s3d-dbg","binary_version":"0.2.2-9"},{"binary_name":"s3d-doc","binary_version":"0.2.2-9"},{"binary_name":"s3dfm","binary_version":"0.2.2-9"},{"binary_name":"s3dosm","binary_version":"0.2.2-9"},{"binary_name":"s3dvt","binary_version":"0.2.2-9"},{"binary_name":"s3dx11gate","binary_version":"0.2.2-9"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-6876.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"negligible"}]}