CVE-2001-0988
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable...
CVE-2001-0988 is a high vulnerability (CVSS 7.2) in Knox Software Arkeia, published July 23, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.35%EPSS, 28th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
Exploit likelihood
Affected products
What each source reports
NVD Score used 7.2
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
- Record
CVE-2001-0988- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
- Record
CVE-2001-0988- Updated
- 2026-11-02
EUVDEUVD-2001-0970No score
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
- Record
EUVD-2001-0970- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5x3-m3mh-rvmmNo score
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable...
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
- Record
GHSA-m5x3-m3mh-rvmm- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.