CVE-2000-0270: Low severity gnu Emacs vulnerability
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Do not use the make-temp-name Lisp function to create temporary files; it generates predictable names that allow symlink attacks. Modify Emacs Lisp code to avoid calling make-temp-name when creating temporary files (replace or remove its usage).
GNU Emacs (Lisp function make-temp-name) usage = do not use
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0270?
CVE-2000-0270 has a moderate severity as it allows for symlink attacks due to predictable temporary file names.
How do I fix CVE-2000-0270?
To mitigate CVE-2000-0270, upgrade to a newer version of Emacs that does not use predictable temporary file names.
Which versions of Emacs are affected by CVE-2000-0270?
CVE-2000-0270 affects Emacs versions 20.0 to 20.6.
What types of attacks can CVE-2000-0270 lead to?
CVE-2000-0270 can lead to symlink attacks, allowing unauthorized access to files or directories.
Is CVE-2000-0270 still a concern for modern systems?
While CVE-2000-0270 primarily affects older versions of Emacs, it remains a concern for systems still using those versions.