CVE-2009-1215: GNU Screen

Low severity, CVSS 1.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

Affected products

• GNU GNU Screen: version 4.0.3 only

Published 2009-04-01. Last modified 2026-06-16.