PT-2002-3046 · Joe · Joe

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2334

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joe text editor versions 2.8 through 2.9.7

Description The issue allows local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users, due to the failure to remove the group and user setuid bits for backup files.

Recommendations For Joe text editor versions 2.8 through 2.9.7, consider removing the setuid and setgid bits from backup files manually to prevent exploitation until a proper fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-2334

Produtos afetados

Joe

Referências · 4

• http://iss.net/security_center/static/10125.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2334 · Nota de Segurança
• http://online.securityfocus.com/archive/1/292138 · Nota
• http://securityfocus.com/bid/5732 · Nota