CVE-2003-0498 Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileg...
HighCVSS 7.2
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intersystems cache database | = 5 | No fix listed |
References
- 20030701 Caché Insecure Installation File and Directory Permissions third-party-advisory
- www.intersystems.com