CVE-2009-1215

GNU Screen 4.0.3 - Arbitrary File Creation and Overwrite via Symlink Attack on Temporary File

Title source: llm
STIX 2.1

Description

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

References (7)

Core 7
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=492104
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/03/25/7
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49887
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34521
Various Sources x_refsource_misc
http://savannah.gnu.org/bugs/?25296

Scores

EPSS 0.0009
EPSS Percentile 24.5%

Details

CWE
CWE-362
Status published
Products (1)
gnu/gnu_screen 4.0.3
Published Apr 01, 2009
Tracked Since Feb 18, 2026