CVE-2001-1439

Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service "system availability" via text editors such as 1 e, 2 ex, 3 vi, 4 edit, 5 view, and 6 vedit...

HP-UX PHCO_22229 : HPSBUX0102-140 Sec. Vulnerability in Text editors (rev.1)

s700800 11.00 ex1,vi1 cumulative patch : Text editors contain a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22229. The text itself is copyright C Hewlett-Packard Development Company, L....

RHEL 2.1 / 3 : emacs (RHSA-2005:112)

Updated Emacs packages that fix a string format issue are now available. Emacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. If a user connects to a malicious POP server, an...

CVE-2002-2334

Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...

Joe Text Editor 2.8 - '.joerc' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/2437/info Joe is a text editor originally written by Joseph Allen. Joe offers a user-friendly interface, with key binding and configuration familiar to many users of Microsoft Word Processing tools. A problem in the sourcing of the .joerc file could lead ...

Joe Text Editor 2.8 - .joerc Arbitrary Command Execution

Joe Text Editor 2.8 - .joerc Arbitrary Command Execution source: https://www.securityfocus.com/bid/2437/info Joe is a text editor originally written by Joseph Allen. Joe offers a user-friendly interface, with key binding and configuration familiar to many users of Microsoft Word Processing tools....

Vim 5.x - Swap File Race Condition

Vim 5.x - Swap File Race Condition / source: https://www.securityfocus.com/bid/2927/info Vim is an enhanced version of the popular text editor vi. A race condition vulnerability exists in the swap file mechanism used by the 'vim' program. The error occurs when a swap file name for a file being...

CVE-2000-1178

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...

CVE-2000-1178

The CVE covers the joe text editor, where on abnormal exit it follows symbolic links when creating the rescue file DEADJOE, enabling local attackers to append/overwrite files of other users’ sessions. The core issue is unsafe handling of DEADJOE links during crash/exit, allowing symlink abuse to ...

CVE-2000-1178

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...

pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION

The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...

University of Washington Pico 3.x4.x - File Overwrite

University of Washington Pico 3.x4.x - File Overwrite source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, ...

Joe Text Editor DEADJOE Symbolic Link Vulnerability

...

CVE-1999-0765

The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...

SGI IRIX 6.5.4 - midikeys Root

source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds, and then songs will bring up ...