CVE-2003-0497 Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
HighCVSS 7.2
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intersystems cache database | = 5 | No fix listed |
References
- 20030701 Caché Insecure Installation File and Directory Permissions third-party-advisory
- www.intersystems.com