CVE-2014-3424
lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
- Score
- CVSS 2.0 3.3 Low
- Status
- Modified - cve@mitre.org
- Published
- 2014-05-08
- Last modified
- 2024-08-06
- Weaknesses
- CWE-59
Affected products
References
- http://advisories.mageia.org/MGASA-2014-0250.html
- http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8
- http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00060.html
- http://openwall.com/lists/oss-security/2014/05/07/7
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:117
