CVE-2008-1845

CVE-2008-1845 describes a privilege escalation vulnerability in the Korn shell (mksh) on MirOS (MirBSD) before R33d. The flaw allows local users to gain privileges due to mksh not flushing tty I/O when launched in a new terminal. An attacker could pre-stage command sequences in a virtual terminal, which a subsequent user launching mksh with the -T option could inadvertently execute. This vulnerability has a CVSS score of 7.2 (High), indicating a significant risk with local access, low attack complexity, and complete impact on confidentiality, integrity, and availability. The EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are virtually nonexistent, indicating a lack of widespread attention or exploitation.