What is CVE-1999-1125?

CVE-1999-1125 is a vulnerability in Oracle Http Server. Published 1997-09-19.

Is CVE-1999-1125 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Http Server

CVE-1999-1125

Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.

EPSS: 0.037 (88.6th percentile) — read the EPSS interpretation.

Affected products

Oracle Http_server — versions 1.0
N/a — versions n/a

Public proof-of-concept exploits

RedLotusIV/AutomatedVulnerabilityScanner

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-1999-1125?: CVE-1999-1125 is a vulnerability in Oracle Http Server. Published 1997-09-19.
Is CVE-1999-1125 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.