Page 2 of 15 results (0.004 seconds)

CVSS: 9.8EPSS: 7%CPEs: 9EXPL: 0

CVE-2002-0561

https://notcve.org/view.php?id=CVE-2002-0561

11 Jun 2002 — The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings. • http://marc.info/?l=bugtraq&m=101301813117562&w=2 •

CVSS: 9.1EPSS: 34%CPEs: 9EXPL: 0

CVE-2002-0563

https://notcve.org/view.php?id=CVE-2002-0563

11 Jun 2002 — The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes. • http://marc.info/?l=bugtraq&m=101301813117562&w=2 • CWE-287: Improper Authentication •

CVSS: 9.8EPSS: 1%CPEs: 9EXPL: 0

CVE-2002-0564

https://notcve.org/view.php?id=CVE-2002-0564

11 Jun 2002 — PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials. • http://marc.info/?l=bugtraq&m=101301813117562&w=2 •

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0

CVE-2002-0566

https://notcve.org/view.php?id=CVE-2002-0566

11 Jun 2002 — PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type. • http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf •

CVSS: 5.5EPSS: 8%CPEs: 5EXPL: 0

CVE-2002-0568

https://notcve.org/view.php?id=CVE-2002-0568

11 Jun 2002 — Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory. • http://marc.info/?l=bugtraq&m=101301813117562&w=2 •