CVE-2002-0103

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-03-25 · updated 2026-06-16

Description

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.

Affected products

Oracle Application Server Web Cache: 2.0.0.0, 2.0.0.1, 2.0.0.2

References

http://marc.info/?l=bugtraq&m=101041510727937&w=2
http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
http://www.iss.net/security_center/static/7766.php
http://www.iss.net/security_center/static/7768.php
http://www.securityfocus.com/bid/3761
http://www.securityfocus.com/bid/3764
http://marc.info/?l=bugtraq&m=101041510727937&w=2
http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
http://www.iss.net/security_center/static/7766.php
http://www.iss.net/security_center/static/7768.php
http://www.securityfocus.com/bid/3761
http://www.securityfocus.com/bid/3764

Get alerted when CVE-2002-0103 or the next vulnerability affects your stack