CVE-2002-0565

Publicada em 11 jun 2002 · Atualizada em 08 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.7%

Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.

Produtos afetados

n/a · n/a

Referências

http://marc.info/?l=bugtraq&m=101301440005580&w=2 http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/8100 http://www.cert.org/advisories/CA-2002-08.html http://www.kb.cert.org/vuls/id/547459 http://www.securityfocus.com/bid/4034