CVE-2002-1632

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Ссылки

http://www.kb.cert.org/vuls/id/717827
US Government Resource
http://www.kb.cert.org/vuls/id/SVIM-576QLZ
Patch
US Government Resource
http://www.nextgenss.com/papers/hpoas.pdf
Patch
http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf
http://www.securityfocus.com/bid/6556
https://exchange.xforce.ibmcloud.com/vulnerabilities/8665
http://www.kb.cert.org/vuls/id/717827
US Government Resource
http://www.kb.cert.org/vuls/id/SVIM-576QLZ
Patch
US Government Resource
http://www.nextgenss.com/papers/hpoas.pdf
Patch
http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf
http://www.securityfocus.com/bid/6556
https://exchange.xforce.ibmcloud.com/vulnerabilities/8665

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01444

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9q5p-xwx7-2xf5

github

почти 4 года назад