PT-2001-2351 · Oracle+1 · Oracle 9I Application Server+1

Published 2001-12-21 · Updated 2008-09-05 · CVE-2001-1217

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle 9i Application Server

Description A directory traversal issue in the PL/SQL Apache module allows remote attackers to access sensitive information. This is achieved by using a double encoded URL that contains .. (dot dot) sequences.

Recommendations For Oracle 9i Application Server, apply the necessary security patches to fix the directory traversal vulnerability in the PL/SQL Apache module.

Fix

Related Identifiers

CVE-2001-1217

Affected Products

Apache

Oracle 9I Application Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2001-1217 · Security Note
• http://securityfocus.com/bid/3727 · Vendor Advisory
• http://kb.cert.org/vuls/id/758483 · Patch
• http://iss.net/security_center/static/7728.php · Vendor Advisory
• http://securityfocus.com/archive/1/246663 · Vendor Advisory
• http://otn.oracle.com/deploy/security/pdf/modplsql.pdf · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1217 · Note