CVE-2001-1058

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/200462Patch, Vendor Advisory
http://www.securityfocus.com/bid/3118Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6927
http://www.securityfocus.com/archive/1/200462Patch, Vendor Advisory
http://www.securityfocus.com/bid/3118Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6927

Timeline

Published: Feb 13, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-10593.6VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license informatio CVE-2001-10607.5phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument CVE-2001-106110.0Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.CVE-2001-10627.2Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.CVE-2001-10637.2Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) comm CVE-2001-10645.0Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to CVE-2001-10655.0Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based c CVE-2001-10662.1ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitr CVE-2001-106710.0Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requ CVE-2001-10685.0qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instea CVE-2001-10697.2libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows CVE-2001-10702.1Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control char