Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Advisory Watch: March 27th, 2015
Linux Security Week: March 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Debian: 'joe' vulnerability Print E-mail
User Rating:      How can I rate this item?
Posted by Team   
Debian Christer Öberg of Wkit Security AB found a problem in joe (Joe's Own Editor).

Debian Security Advisory DSA-041-1                                  Wichert Akkerman
March  9, 2001

Package        : joe
Problem type   : local exploit
Debian-specific: no

Christer Öberg of Wkit Security AB found a problem in joe (Joe's
Own Editor). joe will look for a configuration file in three
locations: the current directory, the users homedirectory ($HOME)
and in /etc/joe. Since the configuration file can define commands
joe will run (for example to check spelling) reading it from
the current directory can be dangerous: an attacker can leave
a .joerc file in a writable directory, which would be read when
a unsuspecting user starts joe in that directory.

This has been fixed in version 2.8-15.3 and we recommend that
you upgrade your joe package immediately.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.2 alias potato

  Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

  Source archives:
      MD5 checksum: cd6b006c8a2426ada62a6af1ddd001fe
      MD5 checksum: 4f3b3a027cd8baf4c3b1a282b31cb5ed
      MD5 checksum: 84c1aebfce7876b8639945da3c29f204

  Alpha architecture:
      MD5 checksum: bb4f2753fa7b05f5877b7bad353ac7a4

  ARM architecture:
      MD5 checksum: 179c212d01bfaa898259028ce06a24a8

  Intel ia32 architecture:
      MD5 checksum: 39f680f8fde72d0958431f617e774123

  Motorola 680x0 architecture:
      MD5 checksum: 100db16eb2ff8aa43840cdde49d9b5a9

  PowerPC architecture:
      MD5 checksum: 425019054e7eb9b104e96ff351132bf3

  Sun Sparc architecture:
      MD5 checksum: 8f88ab48a61c0c9f5e955fdf0fc79d4e

  These files will be moved into*/binary-$arch/ soon.

For not yet released architectures please refer to the appropriate
directory$arch/ .

apt-get: deb stable/updates main
dpkg-ftp: dists/stable/updates/main
Mailing list:

< Prev   Next >


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
FBI Quietly Removes Recommendation To Encrypt Your Phone
And the prize for LEAST SECURE BROWSER goes to ... Chrome!
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.