PT-2007-4340 · Gnu+1 · Gnu Screen+1
CVE-2007-3048
·
Publicado
2007-06-05
·
Atualizado
2024-08-07
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU screen version 4.0.3
Description:
The issue allows local users to unlock the screen via a CTRL-C sequence at the password prompt. However, multiple third parties have reported an inability to reproduce this issue.
Recommendations:
For GNU screen version 4.0.3, as a temporary workaround, consider disabling the password prompt feature until a patch is available or a more permanent solution is found. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Screen