CVE-2001-0424

HIGH 7.2CVE-2001-0424 · Published 02/07/2001 · updated 16/06/2026

In short

CVE-2001-0424 is a HIGH (CVSS 7.2) vulnerability affecting bubblemon (timecop).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bubblemon timecop	`= 1.0= 1.0pl1= 1.0pl2= 1.0pl3= 1.0pl4= 1.0pl6= 1.0pl7= 1.0pl8= 1.0pl9= 1.1= 1.1test1= 1.1test2= 1.1test3= 1.1test4= 1.1test5= 1.1test6= 1.1test7= 1.2= 1.21= 1.21test1= 1.22= 1.23= 1.2test1= 1.3= 1.31`	No fix yet

Description

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.

References

marc.info
securityfocus.com/bid/2609 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free