CVE-2000-0270

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:P/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 18, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02714.6read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read CVE-2000-02727.8RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.CVE-2000-02735.0PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.CVE-2000-02742.1The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.CVE-2000-02752.1CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file tCVE-2000-02762.1BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.CVE-2000-02777.2Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could alloCVE-2000-02785.0The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, CVE-2000-02795.0BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.CVE-2000-02802.6Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long LocatCVE-2000-02812.1Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.CVE-2000-02825.0TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on
CVE-2000-0270: Low severity, CVSS 3.6 | Vulnix