lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Emacs | Gnu | 22.1 | 22.1 |
Emacs | Gnu | 23.1 | 23.1 |
Emacs | Gnu | 22.3 | 22.3 |
Emacs | Gnu | 22.2 | 22.2 |