CVE-2001-0424: Freebsd

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.

Affected products

• Freebsd Freebsd: version 6.2 only
• Timecop Bubblemon: version 1.0 only; version 1.0pl1 only; version 1.0pl2 only; version 1.0pl3 only; version 1.0pl4 only; version 1.0pl6 only; …

Published 2001-07-02. Last modified 2026-06-16.