CVE-2003-0497
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows...
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
Exploit likelihood
What each source reports
NVD Score used
7.2
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
- Record
CVE-2003-0497- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
- Record
CVE-2003-0497- Updated
- 2026-11-02
EUVDEUVD-2003-0491 No score
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
- Record
EUVD-2003-0491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9g9j-vr2v-2964 No score
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows...
Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing it via cuxs.
- Record
GHSA-9g9j-vr2v-2964- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | InterSystems Cache 4.1.15/5.0.x - Insecure Default Permissions | 2003-07-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0497 is a high vulnerability (CVSS 7.2) in Intersystems Cache Database, published July 4, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. No source names a fixed version.
References
verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=7
intersystems.com/support-learning/support/product-news-alerts/support-alerts-2003
nvd.nist.gov/vuln/detail/CVE-2003-0497
github.com/advisories/GHSA-9g9j-vr2v-2964