| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
emacs: insecure temp files
| Package(s): | emacs21, emacs22 | CVE #(s): | CVE-2008-1694 | ||||||
| Created: | May 6, 2008 | Updated: | May 7, 2008 | ||||||
| Description: | From the Ubuntu advisory: Steve Grubb discovered that the vcdiff script as included in Emacs created temporary files in an insecure way when used with SCCS. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. | ||||||||
| Alerts: |
| ||||||||
(Log in to post comments)