CVE-2002-0103 | BDVDB-2026-3795 Detail

Description#

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=101041510727937&w=2
http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
http://www.securityfocus.com/bid/3764
http://www.securityfocus.com/bid/3761
http://www.iss.net/security_center/static/7766.php
http://www.iss.net/security_center/static/7768.php

Exploit#

No public exploit known

History#

Version 12002-03-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.