CVE-2008-1694
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary...
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Exploit likelihood
What each source reports
NVD Score used
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-1694- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-1694- Updated
- 2026-11-02
EUVDEUVD-2008-1695 No score
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
EUVD-2008-1695- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7cqh-9wjj-hhf9 No score
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary...
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
GHSA-7cqh-9wjj-hhf9- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-1694- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1694 No score
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
DEBIAN-CVE-2008-1694- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xemacs21Debian:12 |
before 21.4.21-4 | 21.4.21-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1694 is a medium vulnerability (CVSS 4.6) in Gnu Emacs, published April 21, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 33rd percentile. Fixed in xemacs21 21.4.21-4.
References
usn.ubuntu.com/607-1
secunia.com/advisories/29905
bugzilla.redhat.com/show_bug.cgi?id=208483
mandriva.com/security/advisories?name=MDVSA-2008:096
vupen.com/english/advisories/2008/1309/references
securitytracker.com/id?1019909
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/41906
securityfocus.com/bid/28857
bugs.gentoo.org/show_bug.cgi?id=216880
nvd.nist.gov/vuln/detail/CVE-2008-1694
github.com/advisories/GHSA-7cqh-9wjj-hhf9
security-tracker.debian.org/tracker/CVE-2008-1694