Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users.
Link | Tags |
---|---|
http://marc.info/?l=bugtraq&m=93216103027827&w=2 | mailing list |
http://marc.info/?l=bugtraq&m=93226771401036&w=2 | mailing list |