PT-2001-1437 · Micro Focus · Microfocus Cobol

Publicado 2001-03-09 · Atualizado 2008-09-05 · CVE-2001-0208

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: MicroFocus Cobol version 4.1

Description: The issue allows local users to gain privileges by modifying files due to insecure permissions in the mfaslmf directory and the nolicense file installed by MicroFocus Cobol with the AppTrack feature enabled.

Recommendations: For MicroFocus Cobol version 4.1, consider changing the permissions of the mfaslmf directory and the nolicense file to secure them and prevent local users from modifying these files. As a temporary workaround, restrict access to the mfaslmf directory to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0208

Produtos afetados

Microfocus Cobol

Referências · 4

• 🔥 http://securityfocus.com/bid/2359 · Exploit
• 🔥 https://exploit-db.com/exploits/20621 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0208 · Nota de Segurança