212 matches found
CVE-2001-0289
Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...
Небольшая дырка в joe
при редактировании файла, если в файл были внесены изменения и joe получил сигнал SIGHUP будет создан временный файл DEADJOE без проверки символьных линков. Кроме того считаывает joerc из текущего каталога, что дает возможность выполнить троянскую команду...
Joe Text Editor 2.8 - '.joerc' Arbitrary Command Execution
source: https://www.securityfocus.com/bid/2437/info Joe is a text editor originally written by Joseph Allen. Joe offers a user-friendly interface, with key binding and configuration familiar to many users of Microsoft Word Processing tools. A problem in the sourcing of the .joerc file could lead ...
Joe Text Editor 2.8 - .joerc Arbitrary Command Execution
Joe Text Editor 2.8 - .joerc Arbitrary Command Execution source: https://www.securityfocus.com/bid/2437/info Joe is a text editor originally written by Joseph Allen. Joe offers a user-friendly interface, with key binding and configuration familiar to many users of Microsoft Word Processing tools....
CVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...
CVE-2000-1178
The CVE covers the joe text editor, where on abnormal exit it follows symbolic links when creating the rescue file DEADJOE, enabling local attackers to append/overwrite files of other users’ sessions. The core issue is unsafe handling of DEADJOE links during crash/exit, allowing symlink abuse to ...
FreeBSD-SA-01:04.joe
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:04 Security Advisory FreeBSD, Inc. Topic: joe creates insecure recovery files Category: ports Module: joe Announced: 2001-01-15 Credits: Christer �berg and Patrik...
CVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...
[SECURITY] [DSA-003-1] Revised security fix for joe
Package : joe Problem type : symlink attack Debian-specific: no The security fix for joe released on November 22, 2000 had a problem: it created the DEADJOE file securily but didnt write anything to it. This has been fixed in version 2.8.15.2 . This is the text from the previous advisory: When jo...
[SECURITY] New version of joe released
Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...
[SECURITY] New version of joe released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : joe Problem type : symlink...
