Vulnerability in Microfocus Cobol

CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.

EPSS: 0.007 (49.5th percentile) — read the EPSS interpretation.

Affected products

Microfocus Cobol — versions 4.1
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)