CVE-2001-0208 – Micro Focus Cobol 4.1 - Arbitrary Command Execution

https://notcve.org/view.php?id=CVE-2001-0208

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files. • https://www.exploit-db.com/exploits/20621 http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html http://www.securityfocus.com/bid/2359 •