Lucene search

[email protected]CVE-2005-1383

HistoryMay 03, 2005 - 4:00 a.m.

CVE-2005-1383

2005-05-0304:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1383

ohs component

oracle application server

usewebcacheip

http server

mod_access

webcache tcp port 7778

security vulnerability

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.952 High

EPSS

Percentile

99.3%

JSON

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

CPENameOperatorVersion
oracle:application_serveroracle application servereq10.1.0.3
oracle:application_serveroracle application servereq10.1.0.2
oracle:application_serveroracle application servereq10.1.0.3.1
oracle:application_serveroracle application servereq10.1.2

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	10.1.0.3
oracle:application_server	oracle application server	eq	10.1.0.2
oracle:application_server	oracle application server	eq	10.1.0.3.1
oracle:application_server	oracle application server	eq	10.1.2

References

marc.info/?l=bugtraq&m=111472266123952&w=2

secunia.com/advisories/15143

www.osvdb.org/15908

www.red-database-security.com/advisory/oracle_webcache_bypass.html

www.securityfocus.com/bid/13418

exchange.xforce.ibmcloud.com/vulnerabilities/20311

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.952 High

EPSS

Percentile

99.3%

JSON

Related for CVE-2005-1383

checkpoint_advisories1 nessus2