Vulnerability Details CVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
References
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356
- http://marc.info/?l=bugtraq&m=97500174210821&w=2
- http://www.debian.org/security/2000/20001201
- http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3
- http://www.redhat.com/support/errata/RHSA-2000-110.html
- http://www.securityfocus.com/bid/1959
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5546
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356
- http://marc.info/?l=bugtraq&m=97500174210821&w=2
- http://www.debian.org/security/2000/20001201
- http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3
- http://www.redhat.com/support/errata/RHSA-2000-110.html
- http://www.securityfocus.com/bid/1959
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5546
Products affected by CVE-2000-1178
-
cpe:2.3:a:joseph_allen:joe:2.8