Security Advisory
CVE-2007-1400
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.