PT-1997-1181 · Oracle · Oracle Webserver

Published 1997-07-23 · Updated 2016-10-18 · CVE-1999-1068

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle Webserver version 2.1

Description The issue allows remote attackers to cause a denial of service via a long HTTP GET request when serving PL/SQL stored procedures.

Recommendations For Oracle Webserver version 2.1, consider restricting the length of HTTP GET requests to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1068

Affected Products

Oracle Webserver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1068 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1068 · Note
• http://marc.info/?l=bugtraq&m=87602661419366&w=2 · Note