EUVD-2001-0208

Malware in sbrugna...

mf.txt

Potential Root Compromise in MicroFocus Cobol Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install,...

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files...

CVE-2001-0208

CVE-2001-0208 affects MicroFocus Cobol 4.1 with the AppTrack feature enabled. The root cause is insecure permissions on the installed mfaslmf directory and a nolicense file, which allows local users to modify these files and gain privileges. The connected sources confirm the issue but do not spec...

Дырка в Microfocus Cobol

При установке создаются файлы открытые на запись и временные файлы с предсказуемыми именами...

Security Hole in Microfocus Cobol

Summary ------- If the AppTrack feature is enabled, the default install of MicroFocus Cobol 4.1 Merant's commercial suite of cobol utilities contains a security hole which can lead to root compromise. Specifics --------- In the default install, /var/mfaslmf is installed mode 777, and...