CVE-2001-1217

Опубликовано: 21 дек. 2001

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.

Ссылки

http://otn.oracle.com/deploy/security/pdf/modplsql.pdf
http://www.iss.net/security_center/static/7728.php
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/758483
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/archive/1/246663
Vendor Advisory
http://www.securityfocus.com/bid/3727
Patch
Vendor Advisory
http://otn.oracle.com/deploy/security/pdf/modplsql.pdf
http://www.iss.net/security_center/static/7728.php
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/758483
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/archive/1/246663
Vendor Advisory
http://www.securityfocus.com/bid/3727
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.54383

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qpxg-78gx-9h6x

github

больше 4 лет назад