Unscored severity · published May 3, 2001
CVE-2001-0229
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts
–
CVSS
0.4%
EPSS
No
On KEV
Description
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chilisoft · Sun
through 3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0229
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0229
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-02/0112.html
More from Chilisoft
–
CVE-2001-0632
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional…
–
CVE-2001-0633
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the…
–
CVE-2001-0634
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service