CVE-2001-1301

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...

rcs2log

I have been sitting on this one for half a year. Time to disclose it. rcs2log uses files in /tmp insecurely. This was reported to the Emacs maintainers an aeon or two ago. Current preleases have a fix. And have had it for at least half a year. NOTE NOTE NOTE: there seem to be quite a few sources...

CVE-2001-1301

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...