Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1215

Опубликовано: 11 янв. 2009
Источник: redhat
EPSS Низкий

Описание

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

Отчет

Red Hat does not consider this to be a security issue. The checks implemented by screen to protect against race condition attacks on /tmp/screen-exchange file provide sufficient protection for this rarely-used buffer exchange feature. For more details, see https://bugzilla.redhat.com/show_bug.cgi?id=492104

Дополнительная информация

https://bugzilla.redhat.com/show_bug.cgi?id=492104screen: Unsafe usage of temporary file

EPSS

Процентиль: 25%
0.00086
Низкий

Связанные уязвимости

ubuntu
больше 16 лет назад

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

nvd
больше 16 лет назад

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

debian
больше 16 лет назад

Race condition in GNU screen 4.0.3 allows local users to create or ove ...

github
больше 3 лет назад

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

EPSS

Процентиль: 25%
0.00086
Низкий