CVEvulnerability

CVE-2001-0424

7.2 HIGH Published 2001-07-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.

Affected configurations

• timecop bubblemon 1.0 • timecop bubblemon 1.0pl1 • timecop bubblemon 1.0pl2 • timecop bubblemon 1.0pl3 • timecop bubblemon 1.0pl4 • timecop bubblemon 1.0pl6 • timecop bubblemon 1.0pl7 • timecop bubblemon 1.0pl8 • timecop bubblemon 1.0pl9 • timecop bubblemon 1.1 • timecop bubblemon 1.1test1 • timecop bubblemon 1.1test2 • timecop bubblemon 1.1test3 • timecop bubblemon 1.1test4 • timecop bubblemon 1.1test5 • timecop bubblemon 1.1test6 • timecop bubblemon 1.1test7 • timecop bubblemon 1.2 • timecop bubblemon 1.2test1 • timecop bubblemon 1.3 • timecop bubblemon 1.21 • timecop bubblemon 1.21test1 • timecop bubblemon 1.22 • timecop bubblemon 1.23 • timecop bubblemon 1.31 • freebsd freebsd 6.2

References