3.6
CVE-2002-2334
- EPSS 0.14%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginJoe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Joseph Allen ≫ Joe Version2.8
Joseph Allen ≫ Joe Version2.9
Joseph Allen ≫ Joe Version2.9.1
Joseph Allen ≫ Joe Version2.9.2
Joseph Allen ≫ Joe Version2.9.4
Joseph Allen ≫ Joe Version2.9.5
Joseph Allen ≫ Joe Version2.9.6
Joseph Allen ≫ Joe Version2.9.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.353 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:P/I:P/A:N
|