PT-1997-1187 · Oracle · Oracle Webserver

Publicado 1997-09-19 · Atualizado 2016-10-18 · CVE-1999-1125

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Webserver versions 2.1 and earlier

Description The issue allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file, as the configuration file is owned by the oracle account.

Recommendations For Oracle Webserver versions 2.1 and earlier, consider changing the ownership of the configuration file to a more secure account to prevent unauthorized modifications. Additionally, restrict access to the oracle account to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1125

Produtos afetados

Oracle Webserver

Referências · 3

• http://marc.info/?l=bugtraq&m=87602880019796&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1125 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1125 · Nota de Segurança