PT-1997-1187 · Oracle · Oracle Webserver

Published 1997-09-19 · Updated 2016-10-18 · CVE-1999-1125

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Webserver versions 2.1 and earlier

Description The issue allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file, as the configuration file is owned by the oracle account.

Recommendations For Oracle Webserver versions 2.1 and earlier, consider changing the ownership of the configuration file to a more secure account to prevent unauthorized modifications. Additionally, restrict access to the oracle account to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1125

Affected Products

Oracle Webserver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1125 · Security Note
• http://marc.info/?l=bugtraq&m=87602880019796&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1125 · Note