CVEvulnerability
CVE-2002-2334
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
Affected configurations
• joseph allen joe 2.8
• joseph allen joe 2.9
• joseph allen joe 2.9.1
• joseph allen joe 2.9.2
• joseph allen joe 2.9.4
• joseph allen joe 2.9.5
• joseph allen joe 2.9.6
• joseph allen joe 2.9.7
Related
Weakness · not in database (1)
References
- http://online.securityfocus.com/archive/1/292138 online.securityfocus.com
- http://www.iss.net/security_center/static/10125.php www.iss.net
- http://www.securityfocus.com/bid/5732 www.securityfocus.com
- http://online.securityfocus.com/archive/1/292138 online.securityfocus.com
- http://www.iss.net/security_center/static/10125.php www.iss.net
- http://www.securityfocus.com/bid/5732 www.securityfocus.com