CVE-2007-3048
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...
CVE-2007-3048 is a high vulnerability (CVSS 7.2) in Gnu Screen, published June 5, 2007. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.71%EPSS, 53rd percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Screen 4.0.3 (OpenBSD) - Local Authentication Bypass | 2008-06-18 |
What each source reports
NVD Score used
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
CVE-2007-3048- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
CVE-2007-3048- Updated
- 2026-11-02
EUVDEUVD-2007-3040No score
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
- Record
EUVD-2007-3040- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g78-xjg6-m9rmNo score
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...
** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue.
- Record
GHSA-6g78-xjg6-m9rm- Updated
- 2026-11-02
OSVBELL-CVE-2007-3048
CVE-2007-3048 does not affect BellSoft software
- Record
BELL-CVE-2007-3048- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-June/063721.html
exchange.xforce.ibmcloud.com/vulnerabilities/34693
nvd.nist.gov/vuln/detail/CVE-2007-3048
github.com/advisories/GHSA-6g78-xjg6-m9rm
docs.bell-sw.com/security/cves/CVE-2007-3048