CVE-2009-1215: Race Condition
Published Jan 11, 2009
·Updated
Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.
Affected Software
1 affected component
GNU GNU screen=4.0.3
Event History
Jan 11, 2009
CVE Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionSeverity
Apr 1, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-1215?
CVE-2009-1215 is classified as a medium severity vulnerability due to its potential for local users to exploit it through a symlink attack.
2
How do I fix CVE-2009-1215?
To fix CVE-2009-1215, upgrade to a later version of GNU screen that is not affected by this vulnerability.
3
What is affected software for CVE-2009-1215?
The vulnerable software for CVE-2009-1215 is GNU screen version 4.0.3.
4
Can CVE-2009-1215 be exploited remotely?
CVE-2009-1215 cannot be exploited remotely as it requires local access to the system.
5
What type of attack is associated with CVE-2009-1215?
CVE-2009-1215 is associated with a race condition vulnerability leading to a symlink attack.