Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-3949HistorySep 22, 2008 - 6:52 p.m.
CVE-2008-3949
2008-09-2218:52:13
Debian Security Bug Tracker
security-tracker.debian.org
17
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xemacs21 | < 21.4.24-11 | xemacs21_21.4.24-11_all.deb |
| Debian | 11 | all | xemacs21 | < 21.4.24-9 | xemacs21_21.4.24-9_all.deb |
| Debian | 999 | all | xemacs21 | < 21.4.24-12 | xemacs21_21.4.24-12_all.deb |
Related
cvelist
cvelist
CVE-2008-3949
2008-09-22 17:00:00
nessus
nessus
Mandriva Linux Security Advisory : emacs (MDVSA-2008:216)
2009-04-23 00:00:00
openSUSE Security Update : emacs (emacs-190)
2009-07-21 00:00:00
openSUSE 10 Security Update : emacs (emacs-5597)
2008-09-16 00:00:00
openvas
openvas
Mandriva Update for emacs MDVSA-2008:216 (emacs)
2009-04-09 00:00:00
Mandriva Update for emacs MDVSA-2008:216 (emacs)
2009-04-09 00:00:00
FreeBSD Ports: emacs
2008-11-19 00:00:00
ubuntucve
ubuntucve
CVE-2008-3949
2008-09-22 00:00:00
prion
prion
Code injection
2008-09-22 18:52:00
nvd
nvd
CVE-2008-3949
2008-09-22 18:52:13
cve
cve
CVE-2008-3949
2008-09-22 18:52:13
freebsd
freebsd
emacs -- run-python vulnerability
2008-09-05 00:00:00
gentoo
gentoo
GNU Emacs, XEmacs: Multiple vulnerabilities
2009-02-23 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2008-3949