CVE-2002-0569

Опубликовано: 03 июл. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Ссылки

http://marc.info/?l=bugtraq&m=101301813117562&w=2
http://www.cert.org/advisories/CA-2002-08.html
Patch
Third Party Advisory
US Government Resource
http://www.iss.net/security_center/static/8453.php
http://www.kb.cert.org/vuls/id/977251
Patch
Third Party Advisory
US Government Resource
http://www.nextgenss.com/papers/hpoas.pdf
http://www.securityfocus.com/bid/4298
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=101301813117562&w=2
http://www.cert.org/advisories/CA-2002-08.html
Patch
Third Party Advisory
US Government Resource
http://www.iss.net/security_center/static/8453.php
http://www.kb.cert.org/vuls/id/977251
Patch
Third Party Advisory
US Government Resource
http://www.nextgenss.com/papers/hpoas.pdf
http://www.securityfocus.com/bid/4298
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02177

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g3xm-75qj-2vf8

github

больше 3 лет назад