low1.2
CVE-2001-1301
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users v…
Impact
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Emacs | Version 20.4 |
| Xemacs | Xemacs | Version 21.1.10 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html
- http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95
- http://www.iss.net/security_center/static/11210.php
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html
- http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95
- http://www.iss.net/security_center/static/11210.php