Lucene search
HistoryApr 01, 2009 - 10:30 a.m.
CVE-2009-1214
cve-2009-1214
gnu screen
session info
sensitive information
file permissions
local exploit
nvd
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.
Affected configurations
Node
gnuscreenMatch4.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnu:screen | gnu screen | eq | 4.0.3 |
References
Related
prion
prion
Information disclosure
2009-04-01 10:30:00
nvd
nvd
CVE-2009-1214
2009-04-01 10:30:00
cvelist
cvelist
CVE-2009-1214
2009-04-01 10:00:00
ubuntucve
ubuntucve
CVE-2009-1214
2009-04-01 00:00:00
debiancve
debiancve
CVE-2009-1214
2009-04-01 10:30:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:108 (zsh)
2009-05-11 00:00:00
Mandrake Security Advisory MDVSA-2009:108 (zsh)
2009-05-11 00:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-1214