CVEvulnerability
CVE-2001-0208
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2001-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Affected configurations
• microfocus cobol 4.1
References
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2359 Exploit, Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2359 Exploit, Patch, Vendor Advisory