CVE Catalog
CVE-2000-0271
MediumExploitation Probability (EPSS)
Low risk0.34%
25th percentile - higher than 25% of all known CVEs
Summary
The read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, allowing an attacker to read unencrypted passwords.
Risk Assessment
Improper key history management may lead to the exposure of sensitive information such as passwords, posing a serious security risk to the system.
Recommendation
It is recommended to upgrade to a newer version of Emacs that addresses key history management and to implement additional password protection measures.
Original NVD description (English source)
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.