Lucene search
HistoryApr 01, 2009 - 10:30 a.m.
CVE-2009-1215
cve-2009-1215
gnu screen
race condition
symlink attack
file overwrite
nvd
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.
Affected configurations
Node
gnugnu_screenMatch4.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnu:gnu_screen | gnu gnu screen | eq | 4.0.3 |
References
Social References
More
Related
ubuntucve
ubuntucve
CVE-2009-1215
2009-04-01 00:00:00
debiancve
debiancve
CVE-2009-1215
2009-04-01 10:30:00
prion
prion
Race condition
2009-04-01 10:30:00
cvelist
cvelist
CVE-2009-1215
2009-04-01 10:00:00
nvd
nvd
CVE-2009-1215
2009-04-01 10:30:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:108 (zsh)
2009-05-11 00:00:00
Mandrake Security Advisory MDVSA-2009:108 (zsh)
2009-05-11 00:00:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-1215