PT-2002-1189 · Oracle · Oracle9Ias Web Cache

Published 2002-03-15 · Updated 2016-10-18 · CVE-2002-0103

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle9iAS Web Cache version 2.0.0.x

Description The issue concerns an installer program that creates executable and configuration files with insecure permissions. This allows local users to gain privileges in two ways: by running webcached or by obtaining the administrator password from the webcache.xml file.

Recommendations For Oracle9iAS Web Cache version 2.0.0.x, consider changing the permissions of the executable and configuration files to secure them and prevent local users from gaining privileges. As a temporary workaround, restrict access to the webcached executable and the webcache.xml file to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0103

Affected Products

Oracle9Ias Web Cache

References · 8

• http://otn.oracle.com/deploy/security/pdf/webcache2.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0103 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0103 · Note
• http://iss.net/security_center/static/7766.php · Note
• http://marc.info/?l=bugtraq&m=101041510727937&w=2 · Note
• http://securityfocus.com/bid/3764 · Note
• http://securityfocus.com/bid/3761 · Note
• http://iss.net/security_center/static/7768.php · Note