Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-0947
cve-2002-0947
buffer overflow
rwcgi60 cgi program
oracle reports server
remote code execution
nvd
oracle9ias
security vulnerability
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.077 Low
EPSS
Percentile
94.2%
Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:reports | oracle reports | eq | 6.0.8 |
| oracle:application_server | oracle application server | eq | 9.0.2 |
References
Related
cvelist
cvelist
CVE-2002-0947
2003-04-02 05:00:00
cert
cert
nessus
nessus
Oracle Application Server Multiple Vulnerabilities
2012-01-24 00:00:00
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.077 Low
EPSS
Percentile
94.2%
Related for CVE-2002-0947