CVE ID:	CVE-2005-0839
Description:	Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local users to gain privileges by injecting mouse or keyboard events into other user sessions.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0839 FLSA:157459-3 http://www.securityfocus.com/archive/1/427980/100/0/threaded RHSA-2005:366 http://www.redhat.com/support/errata/RHSA-2005-366.html [linux-kernel] 20050301 Re: Breakage from patch: Only root should be able to set the N_MOUSE line discipline. http://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg64704.html http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ http://linux.bkbits.net:8080/linux-2.6/cset%4041fa6464E1UuGu6zmketEYxm73KSyQ oval:org.mitre.oval:def:9460 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9460