PT-1999-1778 · Joe'S Own Editor · Joe

Published 1999-07-14 · Updated 2016-10-18 · CVE-1999-1545

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Joe's Own Editor (joe) version 2.8

Description: The issue allows local users to read files that were being edited by other users, due to the world-readable permission set on the crash-save file, DEADJOE.

Recommendations: For version 2.8, consider changing the permissions of the DEADJOE file to prevent other users from reading it, or implement access controls to restrict access to the file.

Fix

Related Identifiers

CVE-1999-1545

Affected Products

Joe

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1545 · Security Note
• http://marc.info/?l=bugtraq&m=93216103027827&w=2 · Note
• http://marc.info/?l=bugtraq&m=93226771401036&w=2 · Note