PT-2001-1437 · Micro Focus · Microfocus Cobol

Published 2001-03-09 · Updated 2008-09-05 · CVE-2001-0208

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: MicroFocus Cobol version 4.1

Description: The issue allows local users to gain privileges by modifying files due to insecure permissions in the mfaslmf directory and the nolicense file installed by MicroFocus Cobol with the AppTrack feature enabled.

Recommendations: For MicroFocus Cobol version 4.1, consider changing the permissions of the mfaslmf directory and the nolicense file to secure them and prevent local users from modifying these files. As a temporary workaround, restrict access to the mfaslmf directory to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0208

Affected Products

Microfocus Cobol

References · 4

• 🔥 http://securityfocus.com/bid/2359 · Exploit
• 🔥 https://exploit-db.com/exploits/20621 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0208 · Security Note