Show filters
224 Total Results
Displaying 211-220 of 224
Sort by:
Attacker Value
Unknown
CVE-2002-0564
Disclosure Date: July 03, 2002 (last updated February 22, 2025)
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.
0
Attacker Value
Unknown
CVE-2002-0560
Disclosure Date: July 03, 2002 (last updated February 22, 2025)
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.
0
Attacker Value
Unknown
CVE-2002-1641
Disclosure Date: May 27, 2002 (last updated February 22, 2025)
Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
0
Attacker Value
Unknown
CVE-2002-0102
Disclosure Date: March 25, 2002 (last updated February 22, 2025)
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
0
Attacker Value
Unknown
CVE-2002-0103
Disclosure Date: March 25, 2002 (last updated February 22, 2025)
An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
0
Attacker Value
Unknown
CVE-2002-0107
Disclosure Date: March 25, 2002 (last updated February 22, 2025)
Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
0
Attacker Value
Unknown
CVE-2001-0836
Disclosure Date: December 06, 2001 (last updated February 22, 2025)
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
0
Attacker Value
Unknown
CVE-2001-1023
Disclosure Date: September 21, 2001 (last updated February 22, 2025)
Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.
0
Attacker Value
Unknown
CVE-2001-1087
Disclosure Date: July 05, 2001 (last updated February 22, 2025)
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
0
Attacker Value
Unknown
CVE-2000-0906
Disclosure Date: December 19, 2000 (last updated February 22, 2025)
Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.
0
