CNCVE编号:CNCVE-20001178 CVE编号:CVE-2000-1178 安全级别:低 漏洞中文描述: 当创立一个以DEADJOE命名的副本时,Joe文字编辑器跟踪一个符号链接,这允许本地用户覆盖其他joe会话,崩溃用户的文件。 漏洞英文描述: Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes. 漏洞参考: BUGTRAQ:20001116 Joe's Own Editor File Link Vulnerability | URL:http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html | REDHAT:RHSA-2000:110-06 | URL:http://www.redhat.com/support/errata/RHSA-2000-110.html | MANDRAKE:MDKSA-2000: 系统类型:其他 漏洞类型:设计错误