lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a     symlink attack on a /tmp/Mosaic.##### temporary file. (CVE-2014-3423)

Note that Nessus relies on the presence of the package as reported by the vendor.

Emacs has been updated to fix the following issues :

  - Several cases of insecure usage of temporary files.
    (CVE-2014-3421 / CVE-2014-3422 / CVE-2014-3423 /     CVE-2014-3424)

  - Use of vc-annotate for renamed files when using Git.
    (bnc#854683)

Updated emacs packages fix security vulnerabilities :

Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs (CVE-2014-3421, CVE-2014-3422, CVE-2014-3423, CVE-2014-3424).

emacs was updated to fix four security issues.

These security issues were fixed :

  - Avoid unsecure usage of temporary files (CVE-2014-3421).

  - Avoid unsecure usage of temporary files (CVE-2014-3422).

  - Avoid unsecure usage of temporary files (CVE-2014-3423).

  - Avoid unsecure usage of temporary files (CVE-2014-3424).

Updated emacs packages fix security vulnerabilities :

Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs (CVE-2014-3421, CVE-2014-3422, CVE-2014-3423).

CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 (#1095587)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
218071	Linux Distros Unpatched Vulnerability : CVE-2014-3423	Nessus	Misc.	critical
83285	SuSE 11.3 Security Update : emacs (SAT Patch Number 10519)	Nessus	SuSE Local Security Checks	low
82370	Mandriva Linux Security Advisory : emacs (MDVSA-2015:117)	Nessus	Mandriva Local Security Checks	low
79368	openSUSE Security Update : emacs (openSUSE-SU-2014:1460-1)	Nessus	SuSE Local Security Checks	low
74451	Mandriva Linux Security Advisory : emacs (MDVSA-2014:118)	Nessus	Mandriva Local Security Checks	low
74236	Fedora 20 : emacs-24.3-17.fc20 (2014-6554)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2014-3423

critical

Tenable Plugins

critical

low

low

low

low

low