Description

The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.

Remediation

References

CVE-2000-1235

Related Vulnerabilities

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2223)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1315)

MySQL CVE-2018-2812 Vulnerability (CVE-2018-2812)

WordPress Plugin WPtouch Cross-Site Request Forgery (1.9.31)

MySQL CVE-2019-2830 Vulnerability (CVE-2019-2830)

Severity

Medium

Classification

CVE-2000-1235

Tags

Missing Update Known Vulnerabilities