CVE-2002-0103

Medium

Description

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

SeverityMedium
CVSS4.6
Exploit probability—
ProductOracle Application Server Web Cache
PublishedMar 25, 2002
First seenMar 25, 2002

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
oracle application_server_web_cache2.0.0.0, 2.0.0.1, 2.0.0.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2002-0103 · Oracle Application Server Web Cache · Dark Radar