CVE-2001-0208

Micro Focus Cobol 4.1 - Arbitrary Command Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2001-0208 has a selected CVSS score of 4.6; EIP currently links 1 catalogued exploit.

Description

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBMicro Focus Cobol 4.1 - Arbitrary Command ExecutionExploitDB exploitby Dixie FlatlineNot analyzed1 file
ExploitDB
PoC details

References

3