Emacs movemail race condition
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| emacs21 (Ubuntu) |
Invalid
|
Medium
|
Unassigned | ||
| Dapper |
Won't Fix
|
Medium
|
Unassigned | ||
| Hardy |
Won't Fix
|
Medium
|
Unassigned | ||
| Intrepid |
Invalid
|
Medium
|
Unassigned | ||
| Jaunty |
Won't Fix
|
Medium
|
Unassigned | ||
| Karmic |
Invalid
|
Medium
|
Unassigned | ||
| Lucid |
Invalid
|
Medium
|
Unassigned | ||
| emacs22 (Ubuntu) |
Fix Released
|
Medium
|
Unassigned | ||
| Dapper |
Invalid
|
Medium
|
Unassigned | ||
| Hardy |
Fix Released
|
Medium
|
Unassigned | ||
| Intrepid |
Fix Released
|
Medium
|
Unassigned | ||
| Jaunty |
Fix Released
|
Medium
|
Unassigned | ||
| Karmic |
Fix Released
|
Medium
|
Unassigned | ||
| Lucid |
Fix Released
|
Medium
|
Unassigned | ||
| emacs23 (Ubuntu) |
Fix Released
|
Medium
|
Unassigned | ||
| Dapper |
Invalid
|
Medium
|
Unassigned | ||
| Hardy |
Invalid
|
Medium
|
Unassigned | ||
| Intrepid |
Invalid
|
Medium
|
Unassigned | ||
| Jaunty |
Invalid
|
Medium
|
Unassigned | ||
| Karmic |
Fix Released
|
Medium
|
Unassigned | ||
| Lucid |
Fix Released
|
Medium
|
Unassigned | ||
Bug Description
Binary package hint: emacs22
As a part of emacs22, specifically from emacs22-bin-common (also confirmed with emacs23), "movemail" is installed as /usr/lib/
A quick glance at the code (lib-src/
I'll submit a patch for this issue this weekend.
CVE References
| Changed in emacs21 (Ubuntu): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Dapper): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Karmic): | |
| status: | New → Invalid |
| Changed in emacs21 (Ubuntu Hardy): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Intrepid): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Jaunty): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Lucid): | |
| status: | Confirmed → Invalid |
| Changed in emacs21 (Ubuntu Karmic): | |
| status: | Invalid → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs22 (Ubuntu Dapper): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs22 (Ubuntu Hardy): | |
| status: | New → Confirmed |
| Changed in emacs22 (Ubuntu Dapper): | |
| status: | Confirmed → Invalid |
| Changed in emacs22 (Ubuntu Hardy): | |
| importance: | Undecided → Medium |
| Changed in emacs22 (Ubuntu Intrepid): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs22 (Ubuntu Jaunty): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs22 (Ubuntu Karmic): | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in emacs21 (Ubuntu Karmic): | |
| status: | Confirmed → Invalid |
| Changed in emacs23 (Ubuntu Lucid): | |
| status: | Confirmed → Invalid |
| Changed in emacs23 (Ubuntu Dapper): | |
| status: | New → Invalid |
| importance: | Undecided → Medium |
| Changed in emacs23 (Ubuntu Hardy): | |
| status: | New → Invalid |
| importance: | Undecided → Medium |
| Changed in emacs23 (Ubuntu Intrepid): | |
| status: | New → Invalid |
| importance: | Undecided → Medium |
| Changed in emacs23 (Ubuntu Jaunty): | |
| status: | New → Invalid |
| importance: | Undecided → Medium |
| Changed in emacs23 (Ubuntu Karmic): | |
| status: | New → Invalid |
| importance: | Undecided → Medium |
| status: | Invalid → Confirmed |
| Changed in emacs23 (Ubuntu Lucid): | |
| status: | Invalid → Confirmed |
| visibility: | private → public |
| visibility: | public → private |
| visibility: | private → public |
| Changed in emacs23 (Ubuntu Lucid): | |
| status: | Confirmed → Fix Released |
| Changed in emacs22 (Ubuntu Lucid): | |
| status: | Confirmed → Fix Released |
| Changed in emacs22 (Ubuntu Hardy): | |
| status: | Confirmed → Fix Released |
| Changed in emacs22 (Ubuntu Intrepid): | |
| status: | Confirmed → Fix Released |
| Changed in emacs22 (Ubuntu Jaunty): | |
| status: | Confirmed → Fix Released |
| Changed in emacs22 (Ubuntu Karmic): | |
| status: | Confirmed → Fix Released |
| Changed in emacs23 (Ubuntu Karmic): | |
| status: | Confirmed → Fix Released |

Thanks for the report! The code looks pretty bad, yes. Would you mind sharing the proof-of-concept script? (and do you mind me sharing with vendor-sec, even I mark it as "private"?) I can delete the script from this bug report before making the bug public after the issues have been fixed.