screen vulnerability

2006-11-0100:00:00

ubuntu.com

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

6.9 Medium

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.8%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10
Ubuntu 5.04

Details

cstone and Rich Felker discovered a programming error in the UTF8 string
handling code of “screen” leading to a denial of service. If a crafted
string was displayed within a screen session, screen would crash or
possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchscreen< 4.0.2-4.1ubuntu5.6.10UNKNOWN
Ubuntu6.06noarchscreen< 4.0.2-4.1ubuntu5.6.06UNKNOWN
Ubuntu5.10noarchscreen< 4.0.2-4.1ubuntu2.5.10UNKNOWN
Ubuntu5.04noarchscreen< 4.0.2-4.1ubuntu2.5.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	screen	< 4.0.2-4.1ubuntu5.6.10	UNKNOWN
Ubuntu	6.06	noarch	screen	< 4.0.2-4.1ubuntu5.6.06	UNKNOWN
Ubuntu	5.10	noarch	screen	< 4.0.2-4.1ubuntu2.5.10	UNKNOWN
Ubuntu	5.04	noarch	screen	< 4.0.2-4.1ubuntu2.5.04	UNKNOWN