{"api_version":"1","generated_at":"2026-07-23T05:16:09+00:00","cve":"CVE-2002-0103","urls":{"html":"https://cve.report/CVE-2002-0103","api":"https://cve.report/api/cve/CVE-2002-0103.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-0103","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0103"},"summary":{"title":"CVE-2002-0103","description":"An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-03-25 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/3764","name":"http://www.securityfocus.com/bid/3764","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Oracle9iAS Web Cache World Readable Password File Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2","name":"http://marc.info/?l=bugtraq&m=101041510727937&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","name":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Technical Resources | Oracle","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/3761","name":"http://www.securityfocus.com/bid/3761","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle9iAS Web Cache Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.iss.net/security_center/static/7768.php","name":"http://www.iss.net/security_center/static/7768.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISS X-Force Database: oracle-appserver-webcache-password (7768): Oracle9iAS Web Cache stores admin password in /webcache/webcache.xml","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/7766.php","name":"http://www.iss.net/security_center/static/7766.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISS X-Force Database: oracle-appserver-webcached-privileges (7766): Oracle9iAS Web Cache allows an attacker to gain privileges using webcached daemon","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-0103","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0103","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"application_server_web_cache","cpe6":"2.0.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"application_server_web_cache","cpe6":"2.0.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"103","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"application_server_web_cache","cpe6":"2.0.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:35:17.569Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf"},{"name":"3764","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/3764"},{"name":"3761","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/3761"},{"name":"oracle-appserver-webcached-privileges(7766)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/7766.php"},{"name":"oracle-appserver-webcache-password(7768)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/7768.php"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-01-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-10-17T13:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf"},{"name":"3764","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/3764"},{"name":"3761","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/3761"},{"name":"oracle-appserver-webcached-privileges(7766)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/7766.php"},{"name":"oracle-appserver-webcache-password(7768)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/7768.php"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-0103","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2"},{"name":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","refsource":"CONFIRM","url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf"},{"name":"3764","refsource":"BID","url":"http://www.securityfocus.com/bid/3764"},{"name":"3761","refsource":"BID","url":"http://www.securityfocus.com/bid/3761"},{"name":"oracle-appserver-webcached-privileges(7766)","refsource":"XF","url":"http://www.iss.net/security_center/static/7766.php"},{"name":"oracle-appserver-webcache-password(7768)","refsource":"XF","url":"http://www.iss.net/security_center/static/7768.php"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-0103","datePublished":"2002-03-15T05:00:00.000Z","dateReserved":"2002-03-15T00:00:00.000Z","dateUpdated":"2024-08-08T02:35:17.569Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-03-25 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"103","Ordinal":"1","Title":"CVE-2002-0103","CVE":"CVE-2002-0103","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"103","Ordinal":"1","NoteData":"An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.","Type":"Description","Title":"CVE-2002-0103"},{"CveYear":"2002","CveId":"103","Ordinal":"2","NoteData":"2002-03-15","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"103","Ordinal":"3","NoteData":"2016-10-17","Type":"Other","Title":"Modified"}]}}}