CVE

Id
38649  
CVE No.
CVE-2009-1214  
Status
Candidate  
Description
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.  
Phase
Assigned (20090331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423255 38649 CVE-2009-1214 MLIST:[oss-security] 20090325 CVE request -- zsh, XFree86-xfs/xorg-x11-xfs, screen  View
423256 38649 CVE-2009-1214 URL:http://www.openwall.com/lists/oss-security/2009/03/25/7  View
423257 38649 CVE-2009-1214 MISC:http://savannah.gnu.org/bugs/?25296  View
423258 38649 CVE-2009-1214 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521123  View
423259 38649 CVE-2009-1214 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/screen/+bug/315993  View
423260 38649 CVE-2009-1214 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=492104  View
423261 38649 CVE-2009-1214 BID:34521  View
423262 38649 CVE-2009-1214 URL:http://www.securityfocus.com/bid/34521  View
423263 38649 CVE-2009-1214 XF:screen-screenexchange-info-disclosure(49886)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40516 JVNDB-2009-001522 Sun ONE Calendar Server および Sun Java System Calendar Server の Sun Calendar Express Web Server における複数のクロスサイトスクリプティングの脆弱性 Sun ONE Calendar Server および Sun Java System Calendar Server の Sun Calendar Express Web Server には、複数のクロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1218 38649 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001522.html  View