Lucene search

K
cveMitreCVE-2001-0229
HistoryMay 03, 2001 - 4:00 a.m.

CVE-2001-0229

2001-05-0304:00:00
mitre
web.nvd.nist.gov
27
cve-2001-0229
chili!soft asp
linux
privilege escalation
inherited mode
security flaw

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

13.2%

Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.

Affected configurations

Nvd
Node
sunchilisoftRange3.6
VendorProductVersionCPE
sunchilisoft*cpe:2.3:a:sun:chilisoft:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

13.2%

Related for CVE-2001-0229