PT-2001-2351 · Oracle+1 · Oracle 9I Application Server+1

Publicado 2001-12-21 · Atualizado 2008-09-05 · CVE-2001-1217

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle 9i Application Server

Description A directory traversal issue in the PL/SQL Apache module allows remote attackers to access sensitive information. This is achieved by using a double encoded URL that contains .. (dot dot) sequences.

Recommendations For Oracle 9i Application Server, apply the necessary security patches to fix the directory traversal vulnerability in the PL/SQL Apache module.

Correção

Identificadores relacionados

CVE-2001-1217

Produtos afetados

Apache

Oracle 9I Application Server

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2001-1217 · Nota de Segurança
• http://securityfocus.com/bid/3727 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/758483 · Correção
• http://iss.net/security_center/static/7728.php · Aviso do Fabricante
• http://otn.oracle.com/deploy/security/pdf/modplsql.pdf · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1217 · Nota
• http://securityfocus.com/archive/1/246663 · Aviso do Fabricante