CVE-2002-2334 | BDVDB-2026-27408 Detail

Description#

Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://online.securityfocus.com/archive/1/292138
http://www.securityfocus.com/bid/5732
http://www.iss.net/security_center/static/10125.php

Exploit#

No public exploit known

History#

Version 12007-10-26Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.