PT-2001-2427 · Gnu · Emacs+1

Publicado 2001-08-07 · Atualizado 2008-09-05 · CVE-2001-1301

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 21.4 xemacs versions prior to 21.4

Description: The issue allows local users to modify files of other users via a symlink attack on a temporary file. This is related to the use of rcs2log in affected versions.

Recommendations: For Emacs versions prior to 21.4, update to version 21.4 or later to resolve the issue. For xemacs versions prior to 21.4, update to version 21.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1301

Produtos afetados

Emacs

Xemacs

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1301 · Nota de Segurança
• http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95 · Nota
• http://iss.net/security_center/static/11210.php · Nota