VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 19, 1997· Updated Jun 16, 2026

CVE-1999-1125

CVE-1999-1125

Description

Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Oracle Corporation/HTTP Server2 versions
    cpe:2.3:a:oracle:http_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:http_server:*:*:*:*:*:*:*:*range: <=2.1
    • cpe:2.3:a:oracle:http_server:1.0:*:*:*:*:*:*:*
  • Roxen/Webserverllm-fuzzy
    Range: <=2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.