CVE

Id
4176  
CVE No.
CVE-2001-1372  
Status
Entry  
Description
Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19581 4176 CVE-2001-1372 BUGTRAQ:20010917 Yet another path disclosure vulnerability  View
19582 4176 CVE-2001-1372 URL:http://marc.info/?l=bugtraq&m=100074087824021&w=2  View
19583 4176 CVE-2001-1372 BUGTRAQ:20010921 Response to "Path disclosure vulnerability in Oracle 9i and 8i  View
19584 4176 CVE-2001-1372 URL:http://marc.info/?l=bugtraq&m=100119633925473&w=2  View
19585 4176 CVE-2001-1372 MISC:http://www.nii.co.in/research.html  View
19586 4176 CVE-2001-1372 CERT:CA-2002-08  View
19587 4176 CVE-2001-1372 URL:http://www.cert.org/advisories/CA-2002-08.html  View
19588 4176 CVE-2001-1372 CERT-VN:VU#278971  View
19589 4176 CVE-2001-1372 URL:http://www.kb.cert.org/vuls/id/278971  View
19590 4176 CVE-2001-1372 CONFIRM:http://otn.oracle.com/deploy/security/pdf/jspexecute_alert.pdf  View
19591 4176 CVE-2001-1372 BID:3341  View
19592 4176 CVE-2001-1372 URL:http://www.securityfocus.com/bid/3341  View
19593 4176 CVE-2001-1372 XF:oracle-jsp-reveal-path(7135)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64171 JVNDB-2001-000145 Oracle Application Server の HTTP リクエスト処理における情報漏洩の脆弱性 Oracle Application Server は、サーバに存在しない JSP ファイルの HTTP リクエストを送ることにより、悪意のあるユーザに公開ディレクトリの絶対パスの情報を閲覧可能にしてしまう脆弱性が存在します。 CVE-2001-1372 4176 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000145.html  View