CVE-2009-1214

GNU screen 4.0.3 - Unprotected User Data Exposure via World-Readable Temporary File

Title source: llm
STIX 2.1

Description

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

References (7)

Core 7
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=492104
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49886
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/03/25/7
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34521
Various Sources x_refsource_misc
http://savannah.gnu.org/bugs/?25296

Scores

EPSS 0.0008
EPSS Percentile 24.2%

Details

CWE
CWE-264
Status published
Products (1)
gnu/screen 4.0.3
Published Apr 01, 2009
Tracked Since Feb 18, 2026