CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:timecop:bubblemon:1.0:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl1:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl2:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl3:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl4:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl6:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl7:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl8:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.0pl9:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test1:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test2:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test3:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test4:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test5:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test6:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.1test7:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.2:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.2test1:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.3:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.21:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.21test1:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.22:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.23:*:*:*:*:*:*:*
cpe:2.3:a:timecop:bubblemon:1.31:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*

History

20 Nov 2024, 23:35

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=98744422105430&w=2 - () http://marc.info/?l=bugtraq&m=98744422105430&w=2 -
References () http://www.securityfocus.com/bid/2609 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/2609 - Patch, Vendor Advisory

Information

Published : 2001-07-02 04:00

Updated : 2025-04-03 01:03


NVD link : CVE-2001-0424

Mitre link : CVE-2001-0424

CVE.ORG link : CVE-2001-0424


JSON object : View

Products Affected

freebsd

  • freebsd

timecop

  • bubblemon