Joseph Allen

joseph_allen

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2002-2334 1Joseph Allen 1Joe Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 3.6 LOW· v2 Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other...Show more Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.Show less
CVE-2001-0289 1Joseph Allen 1Joe Apr 16, 2026 May 3, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory,...Show more Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory.Show less
CVE-2000-1178 1Joseph Allen 1Joe Apr 16, 2026 Jan 9, 2001 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.