Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0497. PoCs published by Larry W. Cashdollar.
AI-analyzed exploit summary This exploit leverages insecure default permissions on InterSystems Cache files and directories to overwrite the 'cache' binary with a shell (ash), then executes it via the setuid 'cuxs' binary to gain root privileges.
Description
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
Exploits (1)
This exploit leverages insecure default permissions on InterSystems Cache files and directories to overwrite the 'cache' binary with a shell (ash), then executes it via the setuid 'cuxs' binary to gain root privileges.