PT-2001-2427 · Gnu · Emacs+1

Published 2001-08-07 · Updated 2008-09-05 · CVE-2001-1301

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 21.4 xemacs versions prior to 21.4

Description: The issue allows local users to modify files of other users via a symlink attack on a temporary file. This is related to the use of rcs2log in affected versions.

Recommendations: For Emacs versions prior to 21.4, update to version 21.4 or later to resolve the issue. For xemacs versions prior to 21.4, update to version 21.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1301

Affected Products

Emacs

Xemacs

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1301 · Security Note
• http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95 · Note
• http://iss.net/security_center/static/11210.php · Note