CVE-2010-0825

Published: Apr 5, 2010Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.

Affected (4)

Products: Gnu: Emacs

Gnu

1 product

Emacs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Gnu Emacs	Version 22.1
Gnu Emacs	Version 22.2
Gnu Emacs	Version 22.3
Gnu Emacs	Version 23.1

Related CWEs

CWE-264

References (14)

http://secunia.com/advisories/39155

Source: security@ubuntu.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:083

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-919-1

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2010/0734

Source: security@ubuntu.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/0952

Source: security@ubuntu.com

https://bugs.launchpad.net/ubuntu/+bug/531569

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/57457

Source: security@ubuntu.com

http://secunia.com/advisories/39155