Approved changes feed: RSS · Atom

cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*

part: a version: 2.8 update: *

VendorJoseph Allen (57417e31-5fc4-5b53-8a3a-dc6a16ff414c)
ProductJoe (aa7c4f69-bd2f-5182-9c9d-e76869b38dfc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-2334 vulnerable 2026-06-08 04:47:19.731405 Details available
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
Published: 2007-10-26T19:00:00.000Z
Updated: 2024-09-16T17:53:53.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0289 vulnerable 2026-06-08 04:45:19.997708 Details available
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory.
Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T04:14:07.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1178 vulnerable 2026-06-08 04:45:19.375102 Details available
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.
Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:45:37.368Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.