Lucene search
K

7 matches found

OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.8 views

Debian Security Advisory DSA 003-1 (joe)

The remote host is missing an update to joe announced via advisory DSA 003-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2004/09/29 12:0 a.m.28 views

Debian DSA-041-1 : joe - local exploit

Christer Oberg of Wkit Security AB found a problem in joe Joe's Own Editor. joe will look for a configuration file in three locations: The current directory, the users homedirectory $HOME and in /etc/joe. Since the configuration file can define commands joe will run for example to check spelling...

4.6CVSS5.5AI score0.00246EPSS
Exploits0References2
CVE
CVE
added 2001/05/07 4:0 a.m.39 views

CVE-2001-0289

The CVE-2001-0289 entry concerns the joe text editor (version 2.8). It vulnerably searches for a .joerc configuration file in the current working directory, the user’s home directory, and then /etc/joe. This enables a local attacker to place a Trojan Horse .joerc in a directory and cause other us...

4.6CVSS6.8AI score0.00246EPSS
Exploits0References4Affected Software1
FreeBSD Advisory
FreeBSD Advisory
added 2001/01/15 12:0 a.m.3 views

FreeBSD-SA-01:04.joe

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...

5.8AI score
Exploits0
Debian
Debian
added 2000/12/01 4:20 p.m.7 views

[SECURITY] [DSA-003-1] Revised security fix for joe

Package : joe Problem type : symlink attack Debian-specific: no The security fix for joe released on November 22, 2000 had a problem: it created the DEADJOE file securily but didnt write anything to it. This has been fixed in version 2.8.15.2 . This is the text from the previous advisory: When jo...

5.8AI score
Exploits0
Debian
Debian
added 2000/11/22 12:57 a.m.0 views

[SECURITY] New version of joe released

Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...

5.8AI score
Exploits0
Debian
Debian
added 2000/11/21 12:0 a.m.11 views

[SECURITY] New version of joe released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : joe Problem type : symlink...

Exploits0
Rows per page
Query Builder