Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.5 views

SUSE CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS6.7AI score0.00327EPSS
Exploits0References3
Metasploit
Metasploit
added 2018/12/01 6:5 p.m.38 views

Emacs movemail Privilege Escalation

This module exploits a SUID installation of the Emacs movemail utility to run a command as root by writing to 4.3BSD's /usr/lib/crontab.local. The vulnerability is documented in Cliff Stoll's book The Cuckoo's Egg. This module requires Metasploit: https://metasploit.com/download Current source:...

7AI score
Exploits0
OSV
OSV
added 2010/04/05 3:30 p.m.2 views

DEBIAN-CVE-2010-0825

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks...

4.4CVSS6.7AI score0.00327EPSS
Exploits0References1
OSV
OSV
added 2005/02/17 12:0 a.m.20 views

DSA-685-1 emacs21 - format string

Bulletin has no description...

7.5CVSS5.9AI score0.04364EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2005/02/10 12:0 a.m.18 views

Debian DSA-670-1 : emacs20 - format string

Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs, the well-known editor. Via connecting to a malicious POP server an attacker can execute arbitrary code under the privileges of group mail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.5CVSS5.9AI score0.04364EPSS
Exploits0References2
OSV
OSV
added 2005/02/08 12:0 a.m.22 views

DSA-671-1 xemacs21 - format string

Bulletin has no description...

7.5CVSS5.9AI score0.04364EPSS
Exploits0
OSV
OSV
added 2005/02/08 12:0 a.m.24 views

DSA-670-1 emacs20 - format string

Bulletin has no description...

7.5CVSS5.9AI score0.04364EPSS
Exploits0
Rows per page
Query Builder