3.6
CVE-2002-2334
- EPSS 0.3%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:01:06
- Erkennungen
LoginJoe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Joseph Allen ≫ Joe Version 2.8
Joseph Allen ≫ Joe Version 2.9
Joseph Allen ≫ Joe Version 2.9.1
Joseph Allen ≫ Joe Version 2.9.2
Joseph Allen ≫ Joe Version 2.9.4
Joseph Allen ≫ Joe Version 2.9.5
Joseph Allen ≫ Joe Version 2.9.6
Joseph Allen ≫ Joe Version 2.9.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.209 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:P/I:P/A:N
|
http://online.securityfocus.com/archive/1/292138
http://www.iss.net/security_center/static/10125.php
http://www.securityfocus.com/bid/5732