Vulnerabilities > Oracle > Http Server > 1.0

DATE CVE VULNERABILITY TITLE RISK
1997-09-19 CVE-1999-1125 Unspecified vulnerability in Oracle Http Server
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.
network
low complexity
oracle
critical
 10.0
10