Description

The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.

Remediation

References

CVE-2002-0386

Related Vulnerabilities

WordPress 4.7.x Possible SQL Injection Vulnerability (4.7 - 4.7.6)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1635)

Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1855)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0215)

TYPO3 Improper Authentication Vulnerability (CVE-2023-47127)

Severity

Medium

Classification

CVE-2002-0386

Tags

Missing Update Known Vulnerabilities