World-readable statefile in Sun ONE Application Server 7.0 for Windows 2000/XP allows privilege escalation through plaintext password exposure

CVE-2003-0414 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.

Learn more about our Cis Benchmark Audit For Server Software.