Ubuntu Update for emacs22, emacs23 vulnerability USN-919-1

  1. Network Vulnerabilities
  2. Ubuntu Local Security Checks
  3. Ubuntu Update for emacs22, emacs23 vulnerability USN-919-1
Summary
Ubuntu Update for Linux kernel vulnerabilities USN-919-1
Solution
Please Install the Updated Packages.
Insight
Dan Rosenberg discovered that the email helper in Emacs did not correctly check file permissions. A local attacker could perform a symlink race to read or append to another user's mailbox if it was stored under a group-writable group-&quot mail&quot directory.
Affected
emacs22, emacs23 vulnerability on Ubuntu 8.04 LTS , Ubuntu 8.10 , Ubuntu 9.04 , Ubuntu 9.10
Severity
Medium Severity
Classification
Related Vulnerabilities