CVE-1999-1125

First published: Fri Sep 19 1997(Updated: )

Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• vendor/oracle
• product/http server
• canonical/oracle http server
• collector/nvd-index
• agent/severity
• agent/references
• agent/weakness
• agent/author
• agent/description
• agent/type
• agent/event
• agent/last-modified-date
• agent/first-publish-date
• agent/softwarecombine
• agent/tags
• collector/mitre-cve
• source/MITRE
• version/oracle http server/2.1
• version/oracle http server/1.0