Insecure File and Directory Permissions in Caché Database by InterSystems
CVE-2003-0498

Currently unrated

Key Information:

Vendor: Intersystems
Status: Cache Database
Vendor: CVE Published:; 7 August 2003

🔔 Create Intersystems Vulnerability Alert

What is CVE-2003-0498?

The Caché Database 5.x by InterSystems installs its /cachesys/csp directory with improper permissions, enabling local users to potentially execute arbitrary code. This type of vulnerability allows attackers to add server-side scripts that run with root privileges, posing a significant security risk. Users should ensure proper permissions are set to safeguard against unauthorized access and execution of scripts.

References

http://www.verisigninc.com/en_US/products-and-services/ne...

third-party-advisoryx_refsource_IDEFENSE

https://www.intersystems.com/support-learning/support/pro...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 7, 2003
Vulnerability Reserved
Jun 30, 2003

CVE-2003-0498 Data

JSON