CVE-2002-0386

The CVE-2002-0386 entry concerns Oracle9iAS Web Cache, specifically the administration module of Oracle Web Cache in Oracle9iAS 9.0.2. The vulnerability allows remote denial of service (crash) via two conditions: (1) an HTTP GET containing a “..” sequence, and (2) a malformed HTTP GET with chunke...

Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service source: https://www.securityfocus.com/bid/5902/info Oracle 9i Application Server 9iAS allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. Whe...

Oracle Web Cache Admin Module Multiple GET Request Method DoS

It was possible to kill the web server by requesting '/.' or '/../', or sending an invalid request using chunked content encoding. An attacker may exploit this vulnerability to crash the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichae...

Oracle Application Server Web Cache HTTP Request Overflow

It may be possible to make the Oracle9i application server crash or execute arbitrary code by sending it a too long url specially crafted URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Thu, 18 Oct 2001 16:16:20 +0200 From: "andreas junestam" Affiliation: Defcom To:...

Web Server HTTP User-Agent Header Handling Remote Overflow

It was possible to kill the web server by sending an invalid GET request with a long User-Agent field. A remote attacker may exploit this vulnerability to make the web server crash continually or possibly execute arbitrary code. C Tenable Network Security, Inc. Script audit and contributions from...

Oracle Web Cache contains buffer overflow vulnerabilities

Overview The CERT/CC is aware of a report about "several remotely exploitable buffer overflow vulnerabilities in the Oracle Web Cache Server" that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Web Cache process. Description The Oracle Web Cac...

CVE-2002-1641

Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server 9iAS allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

CVE-2002-0102

Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via 1 a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and 2 a request to TCP port 4000 with a large number of "." characters...

CVE-2002-0102

CVE-2002-0102 affects Oracle9iAS Web Cache 2.0.0.x. The vulnerability allows a remote attacker to cause a denial of service by sending crafted requests: to TCP ports 1100, 4000, 4001, or 4002 with a large number of null characters to TCP port 4000 with a large number of '.' charactersImpact per t...

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

CVE-2002-0103

CVE-2002-0103 affects Oracle9iAS Web Cache 2.0.0.x. An installer creates executable and configuration files with insecure permissions, enabling local privilege escalation. Impacted scenarios include (1) executing webcached to gain privileges and (2) reading webcache.xml to obtain the administrato...

CVE-2002-0102

Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via 1 a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and 2 a request to TCP port 4000 with a large number of "." characters...

CVE-2001-0836

CVE-2001-0836 describes a buffer overflow in Oracle9iAS Web Cache 2.0.0.1 that can be triggered by a long HTTP GET request, allowing a remote attacker to potentially execute arbitrary code on the affected system. Connected sources (OpenVAS NASL entries and Nessus plugin data) corroborate a relate...

CVE-1999-1175

Web Cache Control Protocol WCCP in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048...

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...

[PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache

PenTest Limited www.pentest-limited.com Security Advisory Vulnerabilities in Oracle9iAS Web Cache Author: Mark Rowe [email protected] Pete Finnigan [email protected] Date: 7th January 2002 Reference: ptl-2002-01...

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request...

Oracle Application Server Web Cache Multiple Remote DoS

According to its version, the version of OracleWebCache installed on the remote host is affected by denial of service vulnerability. A remote attacker may exploit this vulnerability to crash the remote service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

webcache.pl

Proof-of-concept exploit for Oracle9iAS Web Cache/2.0.0.1.0 Creates the file c:\defcom.iyd By [email protected] C2001 Since we do not control the space after what ESP points to, I was lazy and did a direct buffer jump. So, if it does not work, try changing the return addressstart of buffer in me...