Race Condition Vulnerability in GNU Screen by GNU
CVE-2009-1215

Currently unrated

Key Information:

Vendor

Gnu
Status
Gnu Screen
Vendor
CVE Published:
1 April 2009

What is CVE-2009-1215?

A race condition vulnerability exists in GNU Screen 4.0.3 that enables local users to manipulate arbitrary files through a symlink attack on the /tmp/screen-exchange temporary file. This flaw could allow an attacker to overwrite crucial files, potentially leading to unauthorized access or system instability. Proper user permissions and secure file handling are critical to mitigate this risk.

References

https://bugzilla.redhat.com/show_bug.cgi?id=492104
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2009/03/25/7
mailing-listx_refsource_MLIST
https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.