CVE-2009-1214

published 2009-04-01

CVE-2009-1214: GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session…

medium 4.9 CVSS 3.1

AV L AC L Au N C C I N A N

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	screen	< screen 4.0.3-13 (bookworm)	screen 4.0.3-13 (bookworm)
gnu	screen	—	—
gnu	screen	>= 0 < 4.0.3-13	4.0.3-13
gnu	screen	>= 0 < 4.0.3-13	4.0.3-13
gnu	screen	>= 0 < 4.0.3-13	4.0.3-13
gnu	screen	>= 0 < 4.0.3-13	4.0.3-13

CVSS provenance

nvd 4.9 MEDIUM AV:L/AC:L/Au:N/C:C/I:N/A:N

osv 4.9 MEDIUM

CWE-264