Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

application server web cache vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2002-1641
Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote malicious users to execute arbitrary code via unknown vectors.
Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2Oracle Application Server Web Cache 2.0.0.3
NA
CVE-2002-0102
Oracle9iAS Web Cache 2.0.0.x allows remote malicious users to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2
NA
CVE-2002-0103
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
Oracle Application Server Web Cache 2.0.0.2Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1
NA
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote malicious users to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle ad...
Oracle Application Server Web Cache 9.0.0.4.0Oracle Application Server Web Cache 9.0.2.3.0Oracle Application Server Web Cache 9.0.3.1.0Oracle Application Server Web Cache 9.0.4.0.0Oracle E-business Suite 11i
NA
CVE-2002-0565
Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote malicious users to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages...
Oracle Application Server Web Cache 2.0.0.3Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2Oracle Application Server 1.0.2
NA
CVE-2002-0562
The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote malicious users to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.
Oracle Oracle9i 9.0.1Oracle Application Server 1.0.2Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.3Oracle Oracle9i 9.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2
NA
CVE-2002-0560
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote malicious users to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.
Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2Oracle Application Server Web Cache 2.0.0.3Oracle Oracle8i 8.1.7Oracle Application Server 1.0.2Oracle Oracle9i 9.0.1Oracle Oracle8i 8.1.7.1Oracle Oracle9i 9.0
NA
CVE-2002-0559
Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote malicious users to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a lo...
Oracle Application Server Web Cache 2.0.0.2Oracle Application Server Web Cache 2.0.0.3Oracle Oracle8i 8.1.7Oracle Oracle8i 8.1.7.1Oracle Application Server Web Cache 2.0.0.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server 1.0.2Oracle Oracle9i 9.0Oracle Oracle9i 9.0.1
NA
CVE-2002-0561
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote malicious users to gain privileges and modify DAD settings.
Oracle Application Server 1.0.2Oracle Application Server Web Cache 2.0.0.0Oracle Oracle9i 9.0.1Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2Oracle Oracle8i 8.1.7 .1Oracle Oracle9i 9.0Oracle Application Server Web Cache 2.0.0.3Oracle Oracle8i 8.1.7
NA
CVE-2002-0566
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote malicious users to cause a denial of service (crash) via an HTTP Authorization header without an authentication type.
Oracle Application Server Web Cache 2.0.0.3Oracle Oracle8i 8.1.7Oracle Oracle8i 8.1.7 .1Oracle Oracle9i 9.0Oracle Application Server Web Cache 2.0.0.1Oracle Application Server Web Cache 2.0.0.2Oracle Application Server 1.0.2Oracle Application Server Web Cache 2.0.0.0Oracle Oracle9i 9.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook