CVE-2001-0196

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-019710.0Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.CVE-2001-01987.6Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter CVE-2001-01995.0Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the CVE-2001-02005.0HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will lisCVE-2001-02017.5The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arCVE-2001-02025.0Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.CVE-2001-020310.0Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a fCVE-2001-02045.0Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP pCVE-2001-02055.0Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the rCVE-2001-02065.0Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) oCVE-2001-020710.0Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after aCVE-2001-02084.6MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, wh
CVE-2001-0196: Medium severity, CVSS 5.0 | Vulnix