CVE-2003-0414 Information disclosure in n/a

High 7.2 Published 11 Jun 2003 Updated 8 Aug 2024

Local attackers can read plaintext passwords from world-readable state files to escalate privileges in Sun ONE Application Server.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2003-0414?

CVE-2003-0414 is a high-severity vulnerability in n/a, published on 11 Jun 2003. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.

Which versions are affected by CVE-2003-0414?

It affects 1 product.

Products include Sun One Application Server.

How do I fix CVE-2003-0414?

No fix has been published for CVE-2003-0414 yet. Limit exposure of the affected software until one is available.

Is CVE-2003-0414 being exploited?

There is no known exploitation of CVE-2003-0414 in the wild and no public exploit code.

Sources

Also known as GHSA-8753-xfxj-9r3f.