CVE-2001-0067
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could...
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
Exploit likelihood
What each source reports
NVD Score used
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
- Record
CVE-2001-0067- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
- Record
CVE-2001-0067- Updated
- 2026-11-02
EUVDEUVD-2001-0067 No score
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
- Record
EUVD-2001-0067- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xf3-j46h-rvq4 No score
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could...
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set.
- Record
GHSA-9xf3-j46h-rvq4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0067 is a low vulnerability (CVSS 2.1) in Judd Montgomery Jpilot, published February 2, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.