CVE - CVE-2002-0559

CVE-ID
CVE-2002-0559	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:4032 URL:http://www.securityfocus.com/bid/4032 BUGTRAQ:20020206 Multiple Buffer Overflows in Oracle 9iAS URL:http://online.securityfocus.com/archive/1/254426 CERT:CA-2002-08 URL:http://www.cert.org/advisories/CA-2002-08.html CERT-VN:VU#313280 URL:http://www.kb.cert.org/vuls/id/313280 CERT-VN:VU#659043 URL:http://www.kb.cert.org/vuls/id/659043 CERT-VN:VU#750299 URL:http://www.kb.cert.org/vuls/id/750299 CERT-VN:VU#878603 URL:http://www.kb.cert.org/vuls/id/878603 CERT-VN:VU#923395 URL:http://www.kb.cert.org/vuls/id/923395 CONFIRM:http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf MISC:http://www.nextgenss.com/papers/hpoas.pdf XF:oracle-appserver-plsql-adddad-bo(8098) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8098 XF:oracle-appserver-plsql-authclient-bo(8096) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8096 XF:oracle-appserver-plsql-bo(8095) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8095 XF:oracle-appserver-plsql-cache-bo(8097) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/8097
Assigning CNA
MITRE Corporation
Date Record Created
20020607	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Proposed (20020611)
Votes (Legacy)
ACCEPT(3) Alderson, Baker, Cole MODIFY(1) Frech NOOP(3) Cox, Foat, Wall
Comments (Legacy)
Frech> ADDREF XF:oracle-appserver-location-bo(8457)
Proposed (Legacy)
20020611
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)