CVE-2001-0067

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-02-12 · updated 2026-06-16

Description

The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.

Affected products

Judd Montgomery Jpilot: all versions

References

http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3
http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&
https://exchange.xforce.ibmcloud.com/vulnerabilities/5762
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3
http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&
https://exchange.xforce.ibmcloud.com/vulnerabilities/5762

Get alerted when CVE-2001-0067 or the next vulnerability affects your stack