7.2

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Timecop ≫ Bubblemon Version 1.0
Timecop ≫ Bubblemon Version 1.0pl1
Timecop ≫ Bubblemon Version 1.0pl2
Timecop ≫ Bubblemon Version 1.0pl3
Timecop ≫ Bubblemon Version 1.0pl4
Timecop ≫ Bubblemon Version 1.0pl6
Timecop ≫ Bubblemon Version 1.0pl7
Timecop ≫ Bubblemon Version 1.0pl8
Timecop ≫ Bubblemon Version 1.0pl9
Timecop ≫ Bubblemon Version 1.1
Timecop ≫ Bubblemon Version 1.1test1
Timecop ≫ Bubblemon Version 1.1test2
Timecop ≫ Bubblemon Version 1.1test3
Timecop ≫ Bubblemon Version 1.1test4
Timecop ≫ Bubblemon Version 1.1test5
Timecop ≫ Bubblemon Version 1.1test6
Timecop ≫ Bubblemon Version 1.1test7
Timecop ≫ Bubblemon Version 1.2
Timecop ≫ Bubblemon Version 1.2test1
Timecop ≫ Bubblemon Version 1.3
Timecop ≫ Bubblemon Version 1.21
Timecop ≫ Bubblemon Version 1.21test1
Timecop ≫ Bubblemon Version 1.22
Timecop ≫ Bubblemon Version 1.23
Timecop ≫ Bubblemon Version 1.31
Freebsd ≫ Freebsd Version 6.2 Update stable
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.305
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=98744422105430&w=2
http://www.securityfocus.com/bid/2609
Patch
Vendor Advisory