tocsin

Alpine/screen: unknown

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root

Action: Upgrade screen to 5.0.1-r0 or later.

Affected

introducedfixedlast affected
05.0.1-r0-

Fixed versions

5.0.1-r0

Sources

published · modified · JSON