Login Request a demo
Unscored severity · published Dec 6, 2001
CVE-2001-0836
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request
–
CVSS
14.7%
EPSS
No
On KEV
Description
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Application Server Web Cache · Oracle
2.0.0.1 · source: NVD
Affected product
AS
Application Server Web Cache
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0836
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0836
marc.info
http://marc.info/?l=bugtraq&m=100342151132277&w=2
marc.info
http://marc.info/?l=bugtraq&m=100395487007578&w=2
otn.oracle.com
http://otn.oracle.com/deploy/security/pdf/webcache.pdf
US Government Resource
http://www.cert.org/advisories/CA-2001-29.html
US Government Resource
http://www.kb.cert.org/vuls/id/649979
www.osvdb.org
http://www.osvdb.org/5534
More from Application Server Web Cache
–
CVE-2005-1382
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter
–
CVE-2005-1381
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2)…
–
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long…
–
CVE-2002-0561
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to…
–
CVE-2002-0562
The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain…