CVE-2014-3424

N/A Unknown

Published: May 08, 2014 Modified: May 06, 2026

Description

lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0250.html

Source: cve@mitre.org

http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8

Source: cve@mitre.org

http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00060.html

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2014/05/07/7

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:117

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0250.html