The Screen terminal multiplexer has been the subject of multiple security concerns, primarily affecting version 5.0.0 and installations using setuid-root. These problems include local root exploits, TTY hijacking, improper default PTY permissions, and race conditions in signal handling. These vulnerabilities were identified across various distributions, notably impacting Arch Linux and NetBSD systems.
A coordinated disclosure process with upstream developers has brought these issues to light, although it has faced challenges in ensuring timely and effective communication. Responding to these security vulnerabilities, GNU Screen version 5.0.1 has been launched to address several of these concerns, including fixes for signals with root privileges, buffer overflow issues, and information leaks. This update offers improvements in file permissions and enhances the handling of combining characters.
Despite these patches, the general consensus advises against installing Screen with setuid-root privileges due to the ongoing security risks. For users and administrators, applying the latest patches is crucial to mitigate these vulnerabilities, with further recommendations for refining the software’s security model moving forward. This article emphasizes the importance of remaining vigilant and proactive in addressing such security challenges.

Collections

Screen version 5.0.0 faced serious security vulnerabilities, impacting systems like Arch Linux and NetBSD. Issues include local root exploits and TTY hijacking. A new version, Screen 5.0.1, offers fixes and improvements but advises against setuid-root installations due to ongoing risks. Users should apply patches and consider refining the security model.

Security Vulnerabilities in GNU Screen: A Comprehensive Analysis and Resolution