Lucene search

K
cveMitreCVE-2000-0269
HistoryApr 26, 2000 - 4:00 a.m.

CVE-2000-0269

2000-04-2604:00:00
mitre
web.nvd.nist.gov
38
emacs 20
pty device
permissions
cve-2000-0269
subprocess
local users
nvd.

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

15.7%

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.

Affected configurations

Nvd
Node
gnuemacsMatch20.0
OR
gnuemacsMatch20.1
OR
gnuemacsMatch20.2
OR
gnuemacsMatch20.3
OR
gnuemacsMatch20.4
OR
gnuemacsMatch20.5
OR
gnuemacsMatch20.6
VendorProductVersionCPE
gnuemacs20.0cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*
gnuemacs20.1cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*
gnuemacs20.2cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*
gnuemacs20.3cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*
gnuemacs20.4cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*
gnuemacs20.5cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*
gnuemacs20.6cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

15.7%

Related for CVE-2000-0269