CVE-2001-0973: Fraunhofer Fit Bscw

Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days.

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

Affected products

• Fraunhofer Fit Bscw: up to and including 4.0.2_beta; version 3.3 only; version 3.3.1 only; version 3.4.1 only; version 3.4.3 only; version 4.0.1_beta only

Published 2001-08-31. Last modified 2026-06-16.