« Volver al listado

CVE-2002-2334

Estado: ModificadaBaja (3.6)—

Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Joseph Allen — JOE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2002-2334",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2002-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://online.securityfocus.com/archive/1/292138",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/10125.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/5732",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/archive/1/292138",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.iss.net/security_center/static/10125.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/5732",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users."
    }
  ],
  "lastModified": "2026-06-16T22:01:06.750",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9894A324-ABBD-4FF4-8A51-D73381F40814"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "878ED977-AFC5-4703-8B5C-71BC0F290EDD"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B83FBD7-66F8-464D-9CD5-70E742527A68"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A2C984D-A684-4941-BF31-E410DA90909A"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FC27B2F-4A6F-4802-842F-50B955E7E013"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E82748C5-9506-4B50-A16F-FBB071F211E9"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73778402-1488-47DE-8115-B45711ED61A2"
            },
            {
              "criteria": "cpe:2.3:a:joseph_allen:joe:2.9.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49A961E3-ADA9-41E3-A081-E868AE38F281"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}