CVE

Id
4497  
CVE No.
CVE-2002-0103  
Status
Candidate  
Description
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.  
Phase
Modified (20050706)  
Votes
ACCEPT(5) Cole, Foat, Green, Wall, Ziese | MODIFY(1) Frech  
Comments
Frech> XF:oracle-appserver-webcached-privileges(7766) | XF:oracle-appserver-webcache-password(7768) | CHANGE> [Foat changed vote from NOOP to ACCEPT]  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22183 4497 CVE-2002-0103 BUGTRAQ:20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache  View
22184 4497 CVE-2002-0103 URL:http://marc.info/?l=bugtraq&m=101041510727937&w=2  View
22185 4497 CVE-2002-0103 CONFIRM:http://otn.oracle.com/deploy/security/pdf/webcache2.pdf  View
22186 4497 CVE-2002-0103 BID:3761  View
22187 4497 CVE-2002-0103 URL:http://www.securityfocus.com/bid/3761  View
22188 4497 CVE-2002-0103 BID:3764  View
22189 4497 CVE-2002-0103 URL:http://www.securityfocus.com/bid/3764  View
22190 4497 CVE-2002-0103 XF:oracle-appserver-webcached-privileges(7766)  View
22191 4497 CVE-2002-0103 URL:http://www.iss.net/security_center/static/7766.php  View
22192 4497 CVE-2002-0103 XF:oracle-appserver-webcache-password(7768)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64218 JVNDB-2001-000192 Oracle Application Server の Web Cache におけるパスワードファイル漏洩の脆弱性 Oracle Application Server が使用する Web Cache には、$ORACLE_HOME/webcache/webcache.xml ファイルを任意のユーザに閲覧されてしまう脆弱性が存在します。 CVE-2002-0103 4497 4.6 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000192.html  View