CVE

Id
4950  
CVE No.
CVE-2002-0559  
Status
Candidate  
Description
Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.  
Phase
Proposed (20020611)  
Votes
ACCEPT(3) Alderson, Baker, Cole | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall  
Comments
Frech> ADDREF XF:oracle-appserver-location-bo(8457)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25433 4950 CVE-2002-0559 BUGTRAQ:20020206 Multiple Buffer Overflows in Oracle 9iAS  View
25434 4950 CVE-2002-0559 URL:http://online.securityfocus.com/archive/1/254426  View
25435 4950 CVE-2002-0559 CERT:CA-2002-08  View
25436 4950 CVE-2002-0559 URL:http://www.cert.org/advisories/CA-2002-08.html  View
25437 4950 CVE-2002-0559 CERT-VN:VU#750299  View
25438 4950 CVE-2002-0559 URL:http://www.kb.cert.org/vuls/id/750299  View
25439 4950 CVE-2002-0559 CERT-VN:VU#878603  View
25440 4950 CVE-2002-0559 URL:http://www.kb.cert.org/vuls/id/878603  View
25441 4950 CVE-2002-0559 CERT-VN:VU#659043  View
25442 4950 CVE-2002-0559 URL:http://www.kb.cert.org/vuls/id/659043  View
25443 4950 CVE-2002-0559 CERT-VN:VU#313280  View
25444 4950 CVE-2002-0559 URL:http://www.kb.cert.org/vuls/id/313280  View
25445 4950 CVE-2002-0559 CERT-VN:VU#923395  View
25446 4950 CVE-2002-0559 URL:http://www.kb.cert.org/vuls/id/923395  View
25447 4950 CVE-2002-0559 CONFIRM:http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf  View
25448 4950 CVE-2002-0559 MISC:http://www.nextgenss.com/papers/hpoas.pdf  View
25449 4950 CVE-2002-0559 XF:oracle-appserver-plsql-adddad-bo(8098)  View
25450 4950 CVE-2002-0559 URL:http://xforce.iss.net/static/8098.php  View
25451 4950 CVE-2002-0559 XF:oracle-appserver-plsql-bo(8095)  View
25452 4950 CVE-2002-0559 URL:http://xforce.iss.net/static/8095.php  View
25453 4950 CVE-2002-0559 XF:oracle-appserver-plsql-cache-bo(8097)  View
25454 4950 CVE-2002-0559 URL:http://xforce.iss.net/static/8097.php  View
25455 4950 CVE-2002-0559 XF:oracle-appserver-plsql-authclient-bo(8096)  View
25456 4950 CVE-2002-0559 URL:http://xforce.iss.net/static/8096.php  View
25457 4950 CVE-2002-0559 BID:4032  View

Related JVN