CVE-2010-0825: Medium severity gnu Emacs vulnerability
Published Apr 5, 2010
·Updated
lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.
Affected Software
4 affected components
gnu Emacs=22.1
gnu Emacs=22.2
gnu Emacs=22.3
gnu Emacs=23.1
Event History
Apr 5, 2010
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0825?
CVE-2010-0825 has been classified as a moderate severity vulnerability due to the potential for local users to exploit it.
2
How do I fix CVE-2010-0825?
To fix CVE-2010-0825, update to a patched version of GNU Emacs that addresses the file-permission checks.
3
What systems are affected by CVE-2010-0825?
CVE-2010-0825 affects GNU Emacs versions 22.1, 22.2, 22.3, and 23.1.
4
What kind of attack does CVE-2010-0825 allow?
CVE-2010-0825 allows for a symlink attack that could let local users read, modify, or delete mailbox files.
5
Is CVE-2010-0825 a remote vulnerability?
No, CVE-2010-0825 is a local vulnerability, meaning it requires local access to exploit.