A vulnerability, which was classified as problematic, has been found in Juergen Weigert Screen 3.9.3/3.9.4/3.9.5. Affected by this issue is an unknown code block. The manipulation of the argument vbell_msg with an unknown input leads to a format string vulnerability. Using CWE to declare the problem leads to CWE-134. The product uses a function that accepts a format string as an argument, but the format string originates from an external source. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.

The weakness was disclosed 12/19/2000 (Website). The advisory is shared for download at archives.neohapsis.com. This vulnerability is handled as CVE-2000-0901. The exploitation is known to be easy. The attack needs to be approached locally. No form of authentication is required for exploitation. Technical details as well as a public exploit are known.

A public exploit has been developed in ANSI C. The exploit is available at securityfocus.com. It is declared as proof-of-concept.

Upgrading to version 3.9.8 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (5188).

Productinfo

Vendor

• Juergen Weigert

Name

• Screen

Version

• 3.9.3
• 3.9.4
• 3.9.5

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion