PT-2000-1152 · Oracle · Oracle Web Listener

Published 2000-03-15 · Updated 2008-09-10 · CVE-2000-0169

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle web listener (affected versions not specified)

Description The issue allows remote attackers to execute commands via a malformed URL that includes '?&'. This can be achieved by accessing specific API endpoints, although the exact endpoints are not specified. The general idea is that by manipulating the URL with certain characters, an attacker can bypass normal security restrictions and execute unauthorized commands on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0169

Affected Products

Oracle Web Listener

References · 5

• 🔥 https://exploit-db.com/exploits/19809 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0169 · Security Note
• http://securityfocus.com/bid/1053 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0169 · Note
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html · Note