All errata/sisyphus/ALT-PU-2017-1266-2
ALT-PU-2017-1266-2

Package update screen in branch sisyphus

Version4.5.1-alt1
Task#179360
Published2026-03-07
Max severityHIGH
Severity:

Closed issues (4)

CVE-2007-3048
HIGH7.2

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue

Published: 2007-06-05Modified: 2026-04-23
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2009-1214
MEDIUM4.9

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

Published: 2009-04-01Modified: 2026-04-23
CVSS 2.0MEDIUM 4.9
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:N/A:N
References
CVE-2009-1215
LOW1.9

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

Published: 2009-04-01Modified: 2026-04-23
CVSS 2.0LOW 1.9
CVSS:2.0/AV:L/AC:M/Au:N/C:N/I:P/A:N
References
CVE-2017-5618
HIGH7.8

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.

Published: 2017-03-20Modified: 2025-04-20
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References