CVE:CVE-2001-0424
CNNVD:CNNVD-200107-014
BubbleMon 1.31版本在执行程序之前不能正确终止组特权。本地用户执行带kmem组id的任意命令。
solution:Upgrade timecop bubblemon to a higher version than 1.0,1.0pl1,1.0pl2,1.0pl3,1.0pl4,1.0pl6,1.0pl7,1.0pl8,1.0pl9,1.1,1.1test1,1.1test2,1.1test3,1.1test4,1.1test5,1.1test6,1.1test7,1.2,1.2test1,1.3,1.21,1.21test1,1.22,1.23,1.31,and avoid the version 1.0,1.0pl1,1.0pl2,1.0pl3,1.0pl4,1.0pl6,1.0pl7,1.0pl8,1.0pl9,1.1,1.1test1,1.1test2,1.1test3,1.1test4,1.1test5,1.1test6,1.1test7,1.2,1.2test1,1.3,1.21,1.21test1,1.22,1.23,1.31; Upgrade freebsd freebsd to a higher version than 6.2:stable,and avoid the version 6.2:stable