PT-2001-1011 · Joe · Joe

CVE-2000-1178 · Publicado 2001-01-09 · Atualizado 2024-01-26

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions joe (affected versions not specified)

Description The issue allows local users to overwrite the files of other users whose joe session crashes, due to the joe text editor following symbolic links when creating a rescue copy called DEADJOE during an abnormal exit. This can lead to a violation of the integrity of protected information. The exploitation of this issue can be carried out by a local attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

BDU:2015-03162

CVE-2000-1178

Produtos afetados

Joe

Referências · 12

• 🔥 http://securityfocus.com/bid/1959 · Exploit
• http://redhat.com/support/errata/RHSA-2000-110.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5546 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1178 · Nota de Segurança
• https://t.me/cvenotify/68864 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1178 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03162 · Nota de Segurança
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356 · Nota
• http://linux-mandrake.com/en/security/MDKSA-2000-072.php3 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html · Aviso do Fabricante
• http://debian.org/security/2000/20001201 · Nota
• http://marc.info/?l=bugtraq&m=97500174210821&w=2 · Nota