CVE Vulnerabilities

CVE-2014-3422

Improper Link Resolution Before File Access ('Link Following')

Published: May 08, 2014 | Modified: Jun 30, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.3 LOW
AV:L/AC:M/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.

Weakness

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Software

Name Vendor Start Version End Version
Emacs Gnu 22.1 22.1
Emacs Gnu 21.1 21.1
Emacs Gnu 21.3 21.3
Emacs Gnu 20.1 20.1
Emacs Gnu 20.5 20.5
Emacs Gnu 20.4 20.4
Emacs Gnu 20.7 20.7
Emacs Gnu 20.6 20.6
Emacs Gnu 21.2 21.2
Emacs Gnu 23.3 23.3
Emacs Gnu 23.1 23.1
Emacs Gnu 20.2 20.2
Emacs Gnu 21.3.1 21.3.1
Emacs Gnu 22.3 22.3
Emacs Gnu * 24.3
Emacs Gnu 24.2 24.2
Emacs Gnu 23.4 23.4
Emacs Gnu 21 21
Emacs Gnu 20.3 20.3
Emacs Gnu 21.4 21.4
Emacs Gnu 21.2.1 21.2.1
Emacs Gnu 22.2 22.2
Emacs Gnu 23.2 23.2
Emacs Gnu 20.0 20.0
Emacs Gnu 24.1 24.1

Potential Mitigations

  • Follow the principle of least privilege when assigning access rights to entities in a software system.
  • Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

References