CVE

Id
4778  
CVE No.
CVE-2002-0386  
Status
Candidate  
Description
The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.  
Phase
Modified (20050610)  
Votes
ACCEPT(4) Baker, Cole, Green, Wall | NOOP(1) Cox  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24119 4778 CVE-2002-0386 ATSTAKE:A102802-1  View
24120 4778 CVE-2002-0386 URL:http://www.atstake.com/research/advisories/2002/a102802-1.txt  View
24121 4778 CVE-2002-0386 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdf  View
24122 4778 CVE-2002-0386 BID:5902  View
24123 4778 CVE-2002-0386 URL:http://www.securityfocus.com/bid/5902  View
24124 4778 CVE-2002-0386 XF:oracle-appserver-webcachemanager-dos(10284)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63916 JVNDB-2002-000243 Oracle 製品の Web Cache Administration Tool におけるサービス運用妨害 （DoS） の脆弱性 Oracle Web Cache Administrator Tool において、特定のリクエストが送信された場合に、Oracle WebCache Administrator Tool がサービス運用妨害 （DoS） 状態となる脆弱性が存在します。 CVE-2002-0386 4778 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000243.html  View