CVE

Id
4021  
CVE No.
CVE-2001-1217  
Status
Candidate  
Description
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.  
Phase
Proposed (20020315)  
Votes
ACCEPT(6) Cole, Foat, Frech, Green, Wall, Ziese | NOOP(1) Christey  
Comments
Christey> CERT:CA-2002-08