Vulnerability Details CVE-2001-0424
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.2%
CVSS Severity
CVSS v2 Score 7.2
References
Products affected by CVE-2001-0424
-
cpe:2.3:a:timecop:bubblemon:1.0
-
cpe:2.3:a:timecop:bubblemon:1.0pl1
-
cpe:2.3:a:timecop:bubblemon:1.0pl2
-
cpe:2.3:a:timecop:bubblemon:1.0pl3
-
cpe:2.3:a:timecop:bubblemon:1.0pl4
-
cpe:2.3:a:timecop:bubblemon:1.0pl6
-
cpe:2.3:a:timecop:bubblemon:1.0pl7
-
cpe:2.3:a:timecop:bubblemon:1.0pl8
-
cpe:2.3:a:timecop:bubblemon:1.0pl9
-
cpe:2.3:a:timecop:bubblemon:1.1
-
cpe:2.3:a:timecop:bubblemon:1.1test1
-
cpe:2.3:a:timecop:bubblemon:1.1test2
-
cpe:2.3:a:timecop:bubblemon:1.1test3
-
cpe:2.3:a:timecop:bubblemon:1.1test4
-
cpe:2.3:a:timecop:bubblemon:1.1test5
-
cpe:2.3:a:timecop:bubblemon:1.1test6
-
cpe:2.3:a:timecop:bubblemon:1.1test7
-
cpe:2.3:a:timecop:bubblemon:1.2
-
cpe:2.3:a:timecop:bubblemon:1.21
-
cpe:2.3:a:timecop:bubblemon:1.21test1
-
cpe:2.3:a:timecop:bubblemon:1.22
-
cpe:2.3:a:timecop:bubblemon:1.23
-
cpe:2.3:a:timecop:bubblemon:1.2test1
-
cpe:2.3:a:timecop:bubblemon:1.3
-
cpe:2.3:a:timecop:bubblemon:1.31
-
cpe:2.3:o:freebsd:freebsd:6.2