Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-1000383

Опубликовано: 31 окт. 2017
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*
Версия до 25.3.0 (включая)

EPSS

Процентиль: 35%
0.00142
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 8 лет назад

GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.

CVSS3: 5.5
redhat
больше 8 лет назад

GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.

CVSS3: 5.5
debian
больше 8 лет назад

GNU Emacs version 25.3.1 (and other versions most likely) ignores umas ...

CVSS3: 5.5
github
больше 3 лет назад

GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.

EPSS

Процентиль: 35%
0.00142
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200