Wind River Support Network

HomeDefectsLIN6-7101

Fixed

LIN6-7101 : Security Advisory - screen - CVE-2009-1214

Created: Apr 13, 2014 Updated: Dec 3, 2018

Resolved Date: Apr 13, 2014

Previous ID: LIN3-35746

Found In Version: 6.0

Fix Version: 6.0.0.6

Severity: Severe

Applicable for: Wind River Linux 6

Component/s: Userspace

Description

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1214

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

Steps to Reproduce

Unknown

Other Downloads