CVE-2003-0414
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
27.1%
The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | one_application_server | 7.0 | cpe:2.3:a:sun:one_application_server:7.0:*:*:*:*:*:*:* |
References
marc.info/?l=bugtraq&m=105409846029475&w=2
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55221&zone_32=category%3Asecurity
sunsolve.sun.com/search/document.do?assetkey=1-77-1000610.1-1
www.ciac.org/ciac/bulletins/n-103.shtml
www.iss.net/security_center/static/12096.php
www.securityfocus.com/bid/7712
www.spidynamics.com/sunone_alert.html
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
27.1%