CVE

Id
4951  
CVE No.
CVE-2002-0560  
Status
Candidate  
Description
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.  
Phase
Proposed (20020611)  
Votes
ACCEPT(3) Alderson, Baker, Cole | MODIFY(1) Frech | NOOP(3) Cox, Foat, Wall  
Comments
Frech> XF:oracle-appserver-owautil-gain-information(8451)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25458 4951 CVE-2002-0560 BUGTRAQ:20020206 Hackproofing Oracle Application Server paper  View
25459 4951 CVE-2002-0560 URL:http://marc.info/?l=bugtraq&m=101301813117562&w=2  View
25460 4951 CVE-2002-0560 MISC:http://www.nextgenss.com/papers/hpoas.pdf  View
25461 4951 CVE-2002-0560 CERT:CA-2002-08  View
25462 4951 CVE-2002-0560 URL:http://www.cert.org/advisories/CA-2002-08.html  View
25463 4951 CVE-2002-0560 CERT-VN:VU#307835  View
25464 4951 CVE-2002-0560 URL:http://www.kb.cert.org/vuls/id/307835  View
25465 4951 CVE-2002-0560 CONFIRM:http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf  View
25466 4951 CVE-2002-0560 BID:4294  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63682 JVNDB-2002-000009 Oracle Application Server の PL/SQL モジュールにおける情報漏洩の脆弱性 Oracle Application Server の OWA_UTIL において、いくつかの蓄積されたプロシージャへの Web アクセスを可能にする脆弱性が存在します。 CVE-2002-0560 4951 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000009.html  View