Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0208. PoCs published by Dixie Flatline.
AI-analyzed exploit summary This exploit leverages insecure file permissions on the 'nolicense' shell script in Micro Focus Cobol to execute arbitrary commands as root. The attacker appends malicious commands to the script, which are executed when the application server licenses are exhausted.
Description
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Exploits (1)
This exploit leverages insecure file permissions on the 'nolicense' shell script in Micro Focus Cobol to execute arbitrary commands as root. The attacker appends malicious commands to the script, which are executed when the application server licenses are exhausted.