screen vulnerabilities (Alpaquita)
5 vulnerabilities.
-
screenAlpaquita Screen creates by default world-writable PTYs 5.1 Medium -
screenAlpaquita Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set 7.3 High -
screenAlpaquita Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root 5.7 Medium -
screenAlpaquita Screen 5.0.0 and older versions allow file existence tests when installed setuid-root 2.0 Low -
screenAlpaquita Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen 5.3 Medium