PT-2002-1189 · Oracle · Oracle9Ias Web Cache

Publicado 2002-03-15 · Atualizado 2016-10-18 · CVE-2002-0103

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle9iAS Web Cache version 2.0.0.x

Description The issue concerns an installer program that creates executable and configuration files with insecure permissions. This allows local users to gain privileges in two ways: by running webcached or by obtaining the administrator password from the webcache.xml file.

Recommendations For Oracle9iAS Web Cache version 2.0.0.x, consider changing the permissions of the executable and configuration files to secure them and prevent local users from gaining privileges. As a temporary workaround, restrict access to the webcached executable and the webcache.xml file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0103

Produtos afetados

Oracle9Ias Web Cache

Referências · 8

• http://otn.oracle.com/deploy/security/pdf/webcache2.pdf · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0103 · Nota
• http://iss.net/security_center/static/7766.php · Nota
• http://marc.info/?l=bugtraq&m=101041510727937&w=2 · Nota
• http://securityfocus.com/bid/3764 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0103 · Nota de Segurança
• http://securityfocus.com/bid/3761 · Nota
• http://iss.net/security_center/static/7768.php · Nota