Lucene search

K
nvd[email protected]NVD:CVE-2014-3421
HistoryMay 08, 2014 - 10:55 a.m.

CVE-2014-3421

2014-05-0810:55:05
CWE-59
web.nvd.nist.gov

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.

Affected configurations

NVD
Node
mageia_projectmageiaMatch3
OR
mageia_projectmageiaMatch4
Node
gnuemacsRange24.3
OR
gnuemacsMatch20.0
OR
gnuemacsMatch20.1
OR
gnuemacsMatch20.2
OR
gnuemacsMatch20.3
OR
gnuemacsMatch20.4
OR
gnuemacsMatch20.5
OR
gnuemacsMatch20.6
OR
gnuemacsMatch20.7
OR
gnuemacsMatch21
OR
gnuemacsMatch21.1
OR
gnuemacsMatch21.2
OR
gnuemacsMatch21.2.1
OR
gnuemacsMatch21.3
OR
gnuemacsMatch21.3.1
OR
gnuemacsMatch21.4
OR
gnuemacsMatch22.1
OR
gnuemacsMatch22.2
OR
gnuemacsMatch22.3
OR
gnuemacsMatch23.1
OR
gnuemacsMatch23.2
OR
gnuemacsMatch23.3
OR
gnuemacsMatch23.4
OR
gnuemacsMatch24.1
OR
gnuemacsMatch24.2

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%