lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0038 advisory.

    This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 8.6. It addresses 8 CVEs:
    CVE-2012-0035, CVE-2025-1244, CVE-2012-3479, CVE-2014-3423, CVE-2014-3424, and 3 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0409 advisory.

    This advisory aggregates security fixes for the emacs SRPM in CIQ LTS 9.2. It addresses 11 CVEs:
    CVE-2012-0035, CVE-2025-1244, CVE-2024-30203, CVE-2012-3479, CVE-2014-3423, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A vulnerability has been found and corrected in emacs :

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks (CVE-2010-0825).

Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products.

The updated packages have been patched to correct this issue.

Dan Rosenberg discovered that the email helper in Emacs did not correctly check file permissions. A local attacker could perform a symlink race to read or append to another user's mailbox if it was stored under a group-writable group-'mail' directory.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
357978	Rocky Linux 8.6 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0038)	Nessus	Rocky Linux Local Security Checks	Local	high
353878	Rocky Linux 9.2 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0409)	Nessus	Rocky Linux Local Security Checks	Local	high
45588	Mandriva Linux Security Advisory : emacs (MDVSA-2010:083)	Nessus	Mandriva Local Security Checks	Local	medium
45377	Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : emacs22, emacs23 vulnerability (USN-919-1)	Nessus	Ubuntu Local Security Checks	Local	medium

Detections

Analytics

CVE-2010-0825

medium

Tenable Plugins

high

high

medium

medium