CVE-2000-0271: Medium severity gnu Emacs vulnerability
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Do not use read-passwd and other Lisp functions that retain recently typed keys in Emacs 20. Use alternative secure password-entry methods outside Emacs until an official patch or fixed version is released.
GNU Emacs (Emacs 20) use of read-passwd and other Lisp input functions = disabled / avoid use - Operational
Assume any unencrypted passwords entered via read-passwd or the affected Lisp functions in Emacs 20 may have been exposed; rotate those credentials and any related secrets until the issue is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0271?
CVE-2000-0271 is classified as a moderate severity vulnerability.
How do I fix CVE-2000-0271?
To mitigate CVE-2000-0271, users should upgrade to a version of GNU Emacs later than 20.6.
What does CVE-2000-0271 affect?
CVE-2000-0271 specifically affects GNU Emacs versions 20.0 to 20.6.
What type of vulnerability is CVE-2000-0271?
CVE-2000-0271 is a security vulnerability that allows an attacker to read unencrypted passwords.
Who is at risk from CVE-2000-0271?
Users of GNU Emacs versions 20.0 to 20.6 are at risk from CVE-2000-0271.