CVE-2003-0414: High severity Sun ONE Application Server vulnerability
The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
On affected Windows 2000/XP hosts, modify the NTFS ACL for the application server statefile to remove world-readable permissions (remove 'Everyone' and 'Users' read access). Ensure only the GlassFish/Sun ONE service account and Administrators (and SYSTEM if required) have read access.
Sun ONE Application Server 7.0 (statefile) file_permissions = remove world-readable (remove 'Everyone'/'Users' read access); allow only service account and Administrators - Operational
Rotate any plaintext passwords found in the statefile after securing the file permissions. Update any services or configurations that use those credentials to the new values.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0414?
The severity of CVE-2003-0414 is classified as medium due to the risk of local privilege escalation.
How do I fix CVE-2003-0414?
To fix CVE-2003-0414, modify the statefile permissions to ensure it is not world-readable.
What impact does CVE-2003-0414 have on system security?
CVE-2003-0414 can allow local users to read plaintext passwords, potentially leading to unauthorized access.
Which version of Sun ONE Application Server is affected by CVE-2003-0414?
Only Sun ONE Application Server 7.0 is affected by CVE-2003-0414.
Can CVE-2003-0414 be exploited remotely?
CVE-2003-0414 cannot be exploited remotely as it requires local access to the vulnerable system.