CVE-2000-1236

Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...

CVE-2004-1707

Oracle 8i/9i and IAS 9.0.2.0.1 on Unix are affected by CVE-2004-1707 due to the dbsnmp and nmo programs. They search a default library path and execute libraries with elevated privileges, enabling certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0. No additional ...

CVE-2004-1707: Undefined Security Weakness

The 1 dbsnmp and 2 nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0...

CVE-2001-0591

CVE-2001-0591 is a directory traversal vulnerability in Oracle JSP 1.0.x–1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 that allows remote attackers to read or execute arbitrary .jsp files via a '..' path traversal. The connected Nessus entry confirms the CVE is among Oracle Application Server vulnerab...

CVE-2001-0591: Undefined Security Weakness

Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' dot dot attack...