CVE-2001-0289 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.7% (pctl 53)
Patch early
A public exploit exists.
Description
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.74% — more likely to be exploited than 53% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2001-05-03 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| joseph allen | joe |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Joe Text Editor 2.8 - '.joerc' Arbitrary Command Execution | 2001-02-28 |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html
- http://www.debian.org/security/2001/dsa-041
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3
- http://www.redhat.com/support/errata/RHSA-2001-024.html
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html
- http://www.debian.org/security/2001/dsa-041
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3
- http://www.redhat.com/support/errata/RHSA-2001-024.html
→ the Explorer · watch your stack · NVD