CVE
- Id
- 4021
- CVE No.
- CVE-2001-1217
- Status
- Candidate
- Description
- Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
- Phase
- Proposed (20020315)
- Votes
- ACCEPT(6) Cole, Foat, Frech, Green, Wall, Ziese | NOOP(1) Christey
- Comments
- Christey> CERT:CA-2002-08