CVE-2001-0067

Published: Feb 12, 2001Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.

Affected (1)

Products: Judd Montgomery: Jpilot

Judd Montgomery

1 product

Jpilot

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Judd Montgomery Jpilot	All versions

References (6)

http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3

Source: cve@mitre.org

Patch

http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5762

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5762

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.