CVE-2001-0126: High severity oracle oracle8i vulnerability

Published Mar 12, 2001

Updated

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

Affected Software

1 affected component

Oracle Oracle8i=8.1.7

Event History

Mar 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0126?

CVE-2001-0126 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2001-0126?

To fix CVE-2001-0126, upgrade to a later version of the Oracle XSQL servlet that does not contain this vulnerability.

Who is affected by CVE-2001-0126?

CVE-2001-0126 affects users of Oracle XSQL servlet version 1.0.3.0 and earlier, particularly those running Oracle 8i 8.1.7.

What type of attack can exploit CVE-2001-0126?

CVE-2001-0126 can be exploited through an attacker manipulating the xml-stylesheet parameter to execute arbitrary Java code remotely.

Is there a workaround for CVE-2001-0126?

There are no documented workarounds for CVE-2001-0126; upgrading to a secure version is the recommended approach.