7.2
CVSSv2

CVE-2017-5618

Published: 20/03/2017 Updated: 24/08/2020
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 643
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

GNU screen prior to 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu screen

Vendor Advisories

Debian Bug report logs - #852484 screen: CVE-2017-5618: Privilege escalation in Screen 450 Package: screen; Maintainer for screen is Axel Beckert <abe@debianorg>; Source for screen is src:screen (PTS, buildd, popcon) Reported by: Axel Beckert <abe@debianorg> Date: Tue, 24 Jan 2017 21:39:02 UTC Severity: grave Ta ...
GNU screen before 451 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions ...