CVE-2000-1178

Severity CVSS v4.0:
Pending analysis
Type:
CWE-59 Link Following
Publication date:
09/01/2001
Last modified:
03/04/2025

Description

Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*