high7.2
CVE-2001-0424
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Impact
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Timecop | Bubblemon | Versions 1.0, 1.0pl1, 1.0pl2, 1.0pl3, 1.0pl4, 1.0pl6 |
| Freebsd | Freebsd | Version 6.2 |