What’s Vulnerable › Vulnerabilities

CVE-2001-1301

• Severity: low (CVSS 1.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-08-07 · updated 2026-06-16

Description

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.

Affected products

• GNU Emacs: 20.4
• Xemacs: 21.1.10

References

• http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html
• http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95
• http://www.iss.net/security_center/static/11210.php
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html
• http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95
• http://www.iss.net/security_center/static/11210.php

Get alerted when CVE-2001-1301 or the next vulnerability affects your stack