vulnwire
4.6med

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows lo…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 50%
Public exploits
0
none known

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

Exploit prediction (EPSS)

0.61% probability of exploitation in the next 30 days, higher than 50% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • marc.info /?l=bugtraq&m=101041510727937&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • otn.oracle.com /deploy/security/pdf/webcache2.pdf · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/3764 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/3761 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/7766.php · vdb-entry, x_refsource_XF, x_transferred
  • iss.net /security_center/static/7768.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.