CVE-2008-1694

2008-04-2200:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

Percentile

5.1%

JSON

vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to
overwrite arbitrary files via a symlink attack on temporary files.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchemacs21< 21.4a-3ubuntu2.2UNKNOWN
ubuntu7.04noarchemacs21< 21.4a+1-2ubuntu1.2UNKNOWN
ubuntu7.10noarchemacs21< 21.4a+1-5ubuntu4.1UNKNOWN
ubuntu8.04noarchemacs21< 21.4a+1-5.3ubuntu1.1UNKNOWN
ubuntu7.10noarchemacs22< 22.1-0ubuntu5.2UNKNOWN
ubuntu8.04noarchemacs22< 22.1-0ubuntu10.1UNKNOWN
ubuntu8.10noarchemacs22< 22.2-0ubuntu2UNKNOWN
ubuntu9.04noarchemacs22< 22.2-0ubuntu2UNKNOWN
ubuntu9.10noarchemacs22< 22.2-0ubuntu2UNKNOWN
ubuntu6.06noarchxemacs21< 21.4.18-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	emacs21	< 21.4a-3ubuntu2.2	UNKNOWN
ubuntu	7.04	noarch	emacs21	< 21.4a+1-2ubuntu1.2	UNKNOWN
ubuntu	7.10	noarch	emacs21	< 21.4a+1-5ubuntu4.1	UNKNOWN
ubuntu	8.04	noarch	emacs21	< 21.4a+1-5.3ubuntu1.1	UNKNOWN
ubuntu	7.10	noarch	emacs22	< 22.1-0ubuntu5.2	UNKNOWN
ubuntu	8.04	noarch	emacs22	< 22.1-0ubuntu10.1	UNKNOWN
ubuntu	8.10	noarch	emacs22	< 22.2-0ubuntu2	UNKNOWN
ubuntu	9.04	noarch	emacs22	< 22.2-0ubuntu2	UNKNOWN
ubuntu	9.10	noarch	emacs22	< 22.2-0ubuntu2	UNKNOWN
ubuntu	6.06	noarch	xemacs21	< 21.4.18-1ubuntu1.1	UNKNOWN