Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2003-1232

Published

20 years ago

Last Modified

13 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable..

CVSSv2.0 Score

Severity: Medium
Base Score: 5.1/10
Exploit Score: 4.9/10
Access Vector: Network
Access Complexity: High
Authentication Required: None
Impact Score: 6.4/10
Confidentiality Impact: Partial
Availability Impact: Partial
Integrity Impact: Partial

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:gnu:emacs:21.2.1:::::::*	Yes	-	-

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/005089.html
http://groups.google.com/group/gnu.emacs.bug/browse_frm/thread/9424ec1b2fdae321/c691a2da
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286183
http://secunia.com/advisories/17496
http://www.mandriva.com/security/advisories?name=MDKSA-2005:208
http://www.securityfocus.com/bid/15375