CVE-2002-0565
published 2002-07-03CVE-2002-0565: Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain…
PriorityP421medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
5.65%
92.0th percentile
Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | application_server | — | — |
| oracle | application_server_web_cache | — | — |
| oracle | application_server_web_cache | — | — |
| oracle | application_server_web_cache | — | — |
| oracle | application_server_web_cache | — | — |
| oracle | oracle9i | — | — |
| oracle | oracle9i | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=101301440005580&w=2http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdfhttp://www.cert.org/advisories/CA-2002-08.htmlhttp://www.kb.cert.org/vuls/id/547459http://www.securityfocus.com/bid/4034https://exchange.xforce.ibmcloud.com/vulnerabilities/8100http://marc.info/?l=bugtraq&m=101301440005580&w=2http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdfhttp://www.cert.org/advisories/CA-2002-08.htmlhttp://www.kb.cert.org/vuls/id/547459http://www.securityfocus.com/bid/4034https://exchange.xforce.ibmcloud.com/vulnerabilities/8100
2002-07-03
Published