CVE-2009-1214

Published: Apr 1, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

Affected (1)

Products: Gnu: Screen

Gnu

1 product

Screen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Screen	Version 4.0.3

Related CWEs

CWE-264

References (14)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123

Source: cve@mitre.org

http://savannah.gnu.org/bugs/?25296

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/03/25/7

Source: cve@mitre.org

http://www.securityfocus.com/bid/34521

Source: cve@mitre.org

https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=492104

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/49886

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123