EUVD-2002-0557

Malware in sbrugna...

Oracle 9i HTTP Server Globals.JSA Access Information Disclosure - Ver2 (CVE-2002-0562)

An information disclosure vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Oracle 9i HTTP Server Globals.JSA Access Information Disclosure - Ver2 (CVE-2002-0562)

An information disclosure vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Oracle 9iAS Globals.jsa access

In the default configuration of Oracle9iAS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information. OpenVAS Vulnerability Test $Id: oracle9iglobalsdotjsa.nasl 8023 2017-12-0...

Oracle 9i Application Server Globals.jsa Access Information Disclosure Vulnerability - Active Check

In the default configuration of Oracle 9i Application Server AS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information. SPDX-FileCopyrightText: 2002 Matt Moore Some text...

CVE-2002-0562

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa...

CVE-2002-0562

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa...

Oracle 9iAS default configuration allows access to "globals.jsa" file

Overview Oracle Database Server version 9iAS allows remote users to view the "globals.jsa" file used by Java Server Page JSP scripts. The "globals.jsa" file may contain Oracle usernames, passwords, and other configuration information not intended for public viewing, and attackers may use that...

JSP translation file access under Oracle 9iAS

NGSSoftware Insight Security Research Advisory Name: OracleJSP Systems Affected: Oracle 9iAS Platforms: All Operating Systems Severity: Medium/High Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Date: 6th February 2002 Advisory number: NISR06022002C Advisory...