REDHAT-BUG-492104: Low severity suse screen vulnerability

Published Mar 25, 2009

Updated

A security flaw was found in the screen utility in the way it used to create one particular temporary file. An attacker could use this flaw to perform a symlink attack.

References: https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123

Affected Software

1 affected component

GNU Screen

Event History

Mar 25, 2009

Data Sourced

via Red Hat·12:28 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-492104?

The severity of REDHAT-BUG-492104 is considered to be medium due to its potential for symlink attacks.

How do I fix REDHAT-BUG-492104?

To fix REDHAT-BUG-492104, update to the latest version of GNU Screen that addresses the symlink vulnerability.

What is the nature of the vulnerability in REDHAT-BUG-492104?

The vulnerability in REDHAT-BUG-492104 involves a flaw in how the screen utility creates temporary files, potentially leading to symlink attacks.

Who is affected by REDHAT-BUG-492104?

Users of the GNU Screen utility are affected by REDHAT-BUG-492104 if they use versions vulnerable to the symlink attack.

Is there a workaround for REDHAT-BUG-492104?

A possible workaround for REDHAT-BUG-492104 is to avoid using the vulnerable features of the GNU Screen utility until an update is applied.