PT-2001-1518 · Joe · Joe

Publicado 2001-05-03 · Atualizado 2008-09-05 · CVE-2001-0289

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joe text editor version 2.8

Description The issue allows local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory. This occurs because Joe text editor searches the current working directory for the .joerc configuration file.

Recommendations For Joe text editor version 2.8, consider restricting access to the .joerc configuration file to prevent unauthorized modifications, and avoid executing joe from untrusted directories until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-0289

Produtos afetados

Joe

Referências · 6

• 🔥 https://exploit-db.com/exploits/20658 · Exploit
• http://redhat.com/support/errata/RHSA-2001-024.html · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html · Aviso do Fabricante
• http://debian.org/security/2001/dsa-041 · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0289 · Nota de Segurança