Описание
For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| screen | fixed | 4.9.1-3 | package |
Примечания
Fixed by: https://git.savannah.gnu.org/cgit/screen.git/commit/?id=049b26b22e197ba3be9c46e5c193032e01a4724a
https://www.openwall.com/lists/oss-security/2025/05/12/1
Has potential to break some reattach use cases, but the specific use case
was broken already before.
screen in Debian not installed setuid or setgid
Связанные уязвимости
For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
