CVE-2003-0498

Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2003-08-07

Last modified

2024-08-08

Weaknesses

CWE-94

Affected products

• Cache Database (Intersystems)

References

• http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-…
• https://www.intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003/