medium4.6Public exploit code
CVE-2001-0208
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Micro Focus Cobol 4.1 - Arbitrary Command Execution2001-02-12 · local · unix · Verified
Impact
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Cobol | Version 4.1 |