CVE-2002-0103: An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain…

PriorityP414medium4.6CVSS 2.0

AVLACLAuNCPIPAP

EPSS

0.61%

45.3th percentile

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—
oracle	application_server_web_cache	—	—

CVSS provenance

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

vendor_redhat5.0MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.