NVD

Id
70833  
Name
CVE-2004-0385  
Description
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-06-01  
Modified Date
2017-07-10  
Seq
2004-0385  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365360 70833 CVE-2004-0385 20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache  View
365361 70833 CVE-2004-0385 20040316 new security alert #66 issued in Oracle web cache  View
365362 70833 CVE-2004-0385 20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache  View
365363 70833 CVE-2004-0385 http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf  View
365364 70833 CVE-2004-0385 http://www.inaccessnetworks.com/ian/services/secadv01.txt  View
365365 70833 CVE-2004-0385 VU#413006  View
365366 70833 CVE-2004-0385 9868  View
365367 70833 CVE-2004-0385 oracle-web-cache-vulnerabilities(15463)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62740 JVNDB-2004-000081 Oracle Application Server の Web Cache におけるヒープオーバーフローの脆弱性 Oracle Application Server で利用される特定のバージョンの Web Cache には、HTTP リクエストメソッドとして長い文字列を指定した場合、ヒープ領域でオーバーフローが発生する脆弱性が存在します。 CVE-2004-0385 8812 CVE-2004-0385 70833 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000081.html 2004-03-12 2007-04-01 View