PT-1997-1181 · Oracle · Oracle Webserver

Publicado 1997-07-23 · Atualizado 2016-10-18 · CVE-1999-1068

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Webserver version 2.1

Description The issue allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.

Recommendations For Oracle Webserver version 2.1, consider restricting the length of HTTP GET requests to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1068

Produtos afetados

Oracle Webserver

Referências · 3

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1068 · Nota
• http://marc.info/?l=bugtraq&m=87602661419366&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1068 · Nota de Segurança