Description
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
References
- 20000418 RUS-CERT Advisory 200004-01: GNU Emacs 20 mailing-list
- 1125 vdb-entry