CVE-2000-1178

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...

CVE-2000-1178

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...

pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION

The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...

University of Washington Pico 3.x4.x - File Overwrite

University of Washington Pico 3.x4.x - File Overwrite source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, ...

Joe Text Editor DEADJOE Symbolic Link Vulnerability

...

CVE-1999-0765

The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...

SGI IRIX 6.5.4 - midikeys Root

source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds, and then songs will bring up ...