Description
The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile.
References
- http://www.spidynamics.com/sunone_alert.html
- sunone-insecure-file-permissions(12096) vdb-entry
- 55221 vendor-advisory
- N-103 third-party-advisory government-resource
- 20030526 Multiple Vulnerabilities in Sun-One Application Server mailing-list
- 7712 vdb-entry
- 1000610 vendor-advisory