CVE-2001-0208 MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...
MediumCVSS 4.6
EPSS 0.70%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus cobol | = 4.1 | No fix listed |
References
- 20010211 Security Hole in Microfocus Cobol exploit mailing-list patch vendor-advisory
- 2359 exploit patch vdb-entry vendor-advisory