CVE-2000-1178: Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit,...

Security readout for executives and security teams

Joe text editor could mishandle its crash-recovery file, DEADJOE. On shared systems, a local user may be able to cause another user's crashed Joe session to overwrite a file via a symbolic link. The risk is mainly file integrity loss on legacy Unix/Linux hosts with vulnerable Joe packages installed. Exposure is most plausible on legacy multi-user Unix/Linux systems where the Joe editor is installed from an affected package. Single-user desktops and modern patched distributions are less likely exposed, but the source bundle does not define exact vulnerable versions. Treat this as a legacy shared-system hygiene issue, not an internet-facing emergency. Prioritize remediation where multiple users have shell access or where old Linux distributions remain in production. Mitigation focus: Apply the relevant vendor security update for Joe from the operating system distributor.; Remove or restrict Joe on shared systems if no supported patched package exists.; Review vendor advisories for exact package names and fixed versions..

Prepared

Jul 1, 2026, 09:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.