PT-2003-2135 · Oracle · Webcache+1

Published 2003-10-28 · Updated 2017-07-11 · CVE-2003-1183

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Files versions 9.0.3.1.0 through 9.0.3.3.0

Description The issue allows local users to gain access to cached files despite cacheability rules imposed by Oracle Files, due to a problem in the WebCache component.

Recommendations For versions 9.0.3.1.0 through 9.0.3.3.0, consider restricting access to the WebCache component until a fix is available.

Fix

Related Identifiers

CVE-2003-1183

Affected Products

Oracle Files

Webcache

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2003-1183 · Security Note
• http://secunia.com/advisories/10088 · Vendor Advisory
• http://securityfocus.com/bid/8923 · Vendor Advisory
• http://oracle.com/technology/deploy/security/pdf/2003alert60.pdf · Patch
• http://osvdb.org/2727 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13545 · Note