CVE-2011-1496

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp...

4.6 MediumPublic exploitFix available

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Exploit likelihood

0.95%Down 2.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: CVE-2011-1496
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: CVE-2011-1496
Updated: 2026-11-02

EUVDEUVD-2011-1499 No score

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: EUVD-2011-1499
Updated: 2026-11-03

GitHub AdvisoriesGHSA-ph56-qx6x-j8xv No score

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp...

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: GHSA-ph56-qx6x-j8xv
Updated: 2026-11-02

OSV No score

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: CVE-2011-1496
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-1496 No score

tmux 1.3 and 1.4 does not properly drop group privileges, which allows local users to gain utmp group privileges via a filename to the -S command-line option.

Record: DEBIAN-CVE-2011-1496
Updated: 2026-11-02

Affected products

nicholas marriott tmux

Affected packages

Affected packages
Package	Affected	Fixed
`tmux` Debian:12	before 1.4-6	1.4-6
`tmux` Debian:13	before 1.4-6	1.4-6
`tmux` Debian:14	before 1.4-6	1.4-6
`tmux` Debian:6.0	before 1.3-2+squeeze1, plus listed versions 1.3-21.3-2+squeeze1~bpo50+1	1.3-2+squeeze1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	tmux 1.3/1.4 - '-S' Option Incorrect SetGID Privilege Escalation	2011-04-11

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1496 is a medium vulnerability (CVSS 4.6) in Nicholas Marriott Tmux, published April 7, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in tmux 1.4-6.

References

Show 9 moreShow less