CVE-2003-0498: Code Injection
Caché Database 5.x installs the /cachesys/csp directory with insecure permissions, which allows local users to execute arbitrary code by adding server-side scripts that are executed with root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change ownership to root and remove write access for non-root users so local users cannot add server-side scripts. Example commands: chown -R root:root /cachesys/csp && chmod -R go-w /cachesys/csp
InterSystems Caché /cachesys/csp directory filesystem permissions (ownership and mode) = Make the directory owned by root and remove write permissions for group/others (e.g., chown -R root:root /cachesys/csp; chmod -R go-w /cachesys/csp) - Operational
Search for and remove any unauthorized or recently added server-side scripts under /cashesys/csp (for example, find /cachesys/csp -type f -name '*.csp' -o -name '*.cls' -mtime -30), remove confirmed malicious files, and perform incident response where code execution is suspected (review logs, assess scope, rotate credentials and rebuild affected components as required).
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0498?
CVE-2003-0498 is considered a high severity vulnerability due to the potential for local users to execute arbitrary code with root privileges.
How do I fix CVE-2003-0498?
To fix CVE-2003-0498, change the permissions of the /cachesys/csp directory to prevent local users from adding server-side scripts.
What systems are affected by CVE-2003-0498?
CVE-2003-0498 affects Intersystems Caché Database version 5.x.
What type of vulnerability is CVE-2003-0498?
CVE-2003-0498 is an example of a privilege escalation vulnerability due to insecure directory permissions.
Can CVE-2003-0498 be exploited remotely?
CVE-2003-0498 is not exploitable remotely as it requires local access to execute arbitrary code.