CVE-2001-0424

Published: Jul 2, 2001Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.

Affected (26)

Products: Timecop: Bubblemon · Freebsd: Freebsd

1 product

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Timecop Bubblemon	Version 1.0
Timecop Bubblemon	Version 1.0pl1
Timecop Bubblemon	Version 1.0pl2
Timecop Bubblemon	Version 1.0pl3
Timecop Bubblemon	Version 1.0pl4
Timecop Bubblemon	Version 1.0pl6
Timecop Bubblemon	Version 1.0pl7
Timecop Bubblemon	Version 1.0pl8
Timecop Bubblemon	Version 1.0pl9
Timecop Bubblemon	Version 1.1
Timecop Bubblemon	Version 1.1test1
Timecop Bubblemon	Version 1.1test2
Timecop Bubblemon	Version 1.1test3
Timecop Bubblemon	Version 1.1test4
Timecop Bubblemon	Version 1.1test5
Timecop Bubblemon	Version 1.1test6
Timecop Bubblemon	Version 1.1test7
Timecop Bubblemon	Version 1.21
Timecop Bubblemon	Version 1.21test1
Timecop Bubblemon	Version 1.22
Timecop Bubblemon	Version 1.23
Timecop Bubblemon	Version 1.2
Timecop Bubblemon	Version 1.2test1
Timecop Bubblemon	Version 1.31
Timecop Bubblemon	Version 1.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 6.2 stable

References (4)

http://marc.info/?l=bugtraq&m=98744422105430&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/2609

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=98744422105430&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/2609

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.