screen vulnerabilities (Debian)
12 vulnerabilities.
-
screenDebian Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root 5.7 Medium -
screenDebian Screen 5.0.0 and older versions allow file existence tests when installed setuid-root 2.0 Low -
screenDebian Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen 5.3 Medium -
screenDebian socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms... 6.5 Medium -
screenDebian encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service ... 9.8 Critical -
screenDebian A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49.... 9.8 Critical -
screenDebian GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root... 7.8 High -
screenDebian The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion... 5.0 Medium -
screenDebian Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via... 1.9 Low -
screenDebian GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions,... 4.9 Medium -
screenDebian Multiple unspecified vulnerabilities in the "utf8 combining characters handling" ... 2.6 Low -
screenDebian Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier,... 10.0 High