Launchpad.net

CVE 2009-1215

Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.

See the CVE page on Mitre.org for more details.