CVE-1999-0894

Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals

published January 4, 2000

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

⚠️ A simple oversight leads to terminal chaos! The Red Hat Linux screen program doesn't use Unix98 ptys, letting local users write to other terminals at will! Think of it like a restaurant where patrons can sneak into the kitchen and start changing orders. If nobody's watching, you could end up with a surprise dish instead of your meal! This could result in users unintentionally writing data to others' terminals, which can lead to confusion and potential data leaks. Imagine typing away on your work, only to find the person next to you has somehow altered your screen!

Put simply

Think of it like a restaurant where patrons can sneak into the kitchen and start changing orders. If nobody's watching, you could end up with a surprise dish instead of your meal! In essence, this vulnerability exists because the Red Hat Linux screen program fails to use Unix98 pseudoterminals, allowing local users to access and write to terminals not owned by them.

What to do

This could result in users unintentionally writing data to others' terminals, which can lead to confusion and potential data leaks. Imagine typing away on your work, only to find the person next to you has somehow altered your screen! To mitigate this issue, it's recommended to either update to a patched version of the screen program or implement stricter access controls for terminal access. Keeping your system updated is always a good practice! You've got this! With the right steps, you can keep your terminals safe and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01871 · 79.2th percentile
Published
2000-01-04T05:00Z
EPSS history
Timeline
  • 04 JAN 05:00Z
    Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals
    cvelistv5