Login Request a demo
Unscored severity · published Mar 25, 2002
CVE-2002-0102
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters,…
–
CVSS
4.1%
EPSS
No
On KEV
Description
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Application Server Web Cache · Oracle
2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.2 · source: NVD
Affected product
AS
Application Server Web Cache
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0102
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0102
Patch
http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/3760
www.securityfocus.com
http://www.securityfocus.com/bid/3762
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7765
More from Application Server Web Cache
–
CVE-2005-1382
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter
–
CVE-2005-1381
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2)…
–
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long…
–
CVE-2002-0561
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to…
–
CVE-2002-0562
The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain…