eldav WebDAV client for Emacs, version 0.7.2 and previous versions, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
eldav, a WebDAV client for Emacs, creates temporary files without
taking appropriate security precautions This vulnerability could be
exploited by a local user to create or overwrite files with the
privileges of the user running emacs and eldav
For the stable distribution (woody) this problem has been fixed in
version 0020020411-1woody1
The ol ...
Vulmon