CVE-2001-0208

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 2, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-020910.0Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possiblCVE-2001-02105.0Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in tCVE-2001-02115.0Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextfoCVE-2001-02127.5Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameCVE-2001-021310.0Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.CVE-2001-02145.0Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filCVE-2001-02155.0ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating thCVE-2001-02167.5PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName paraCVE-2001-02175.0Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot)CVE-2001-021810.0Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.CVE-2001-02192.1Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.CVE-2001-02207.2Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
CVE-2001-0208: Medium severity, CVSS 4.6 | Vulnix