Launchpad.net

CVE 2009-1214

GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.

See the CVE page on Mitre.org for more details.