cbcvebase.
CVE-2002-0103
published 2002-03-25

CVE-2002-0103: An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain…

PriorityP414medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.61%
48.7th percentile
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

Affected

3 ranges
VendorProductVersion rangeFixed in
oracleapplication_server_web_cache——
oracleapplication_server_web_cache——
oracleapplication_server_web_cache——

CVSS provenance

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.