CVE-2001-1301: Low severity GNU Emacs vulnerability
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1301?
CVE-2001-1301 has a moderate severity rating, as it allows local users to exploit a symlink vulnerability to modify files of other users.
How do I fix CVE-2001-1301?
To fix CVE-2001-1301, upgrade to a version of Emacs or Xemacs that is after 21.4, as these versions contain the necessary security patches.
Who is affected by CVE-2001-1301?
Users of Emacs versions below 21.4 and Xemacs version 21.1.10 are affected by CVE-2001-1301.
What are the implications of CVE-2001-1301?
The implications of CVE-2001-1301 include unauthorized file modifications by local users, which can lead to data corruption or loss of integrity.
Is there a workaround for CVE-2001-1301?
A workaround for CVE-2001-1301 is to restrict access to the rcs2log tool or implement filesystem permissions that prevent unauthorized symlink creation.