CVE-2003-0414 The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password....
HighCVSS 7.2
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun one application server | = 7.0 | No fix listed |
References
- 20030526 Multiple Vulnerabilities in Sun-One Application Server mailing-list
- 55221 vendor-advisory
- 1000610 vendor-advisory
- N-103 government-resource third-party-advisory vendor-advisory
- sunone-insecure-file-permissions(12096) vdb-entry vendor-advisory
- 7712 vdb-entry vendor-advisory
- www.spidynamics.com