CVE-2007-3048
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...
CVE-2007-3048 is a high vulnerability (CVSS 7.2) in Gnu Screen, published June 5, 2007. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile.
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
Exploit likelihood
What each source reports
NVD Score used
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
CVE-2007-3048- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
CVE-2007-3048- Updated
- 2026-11-02
EUVDEUVD-2007-3040 No score
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
EUVD-2007-3040- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g78-xjg6-m9rm No score
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue.
- Record
GHSA-6g78-xjg6-m9rm- Updated
- 2026-11-02
OSVBELL-CVE-2007-3048
CVE-2007-3048 does not affect BellSoft software
- Record
BELL-CVE-2007-3048- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Screen 4.0.3 (OpenBSD) - Local Authentication Bypass | 2008-06-18 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
lists.grok.org.uk/pipermail/full-disclosure/2007-June/063721.html
exchange.xforce.ibmcloud.com/vulnerabilities/34693
nvd.nist.gov/vuln/detail/CVE-2007-3048
github.com/advisories/GHSA-6g78-xjg6-m9rm
docs.bell-sw.com/security/cves/CVE-2007-3048