CVE-2001-1301

Published: Aug 7, 2001Modified: Apr 16, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.

Affected (2)

Products: Gnu: Emacs · Xemacs: Xemacs

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnu Emacs	Version 20.4
Xemacs Xemacs	Version 21.1.10

References (6)

http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html

Source: cve@mitre.org

Vendor Advisory

http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95

Source: cve@mitre.org

http://www.iss.net/security_center/static/11210.php

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/11210.php

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.