CVE-2002-0386: Medium severity oracle application server vulnerability
The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0386?
CVE-2002-0386 is classified as a denial of service vulnerability affecting Oracle Web Cache.
How do I fix CVE-2002-0386?
To mitigate CVE-2002-0386, it is recommended to apply available patches or updates from Oracle for the affected version.
What systems are affected by CVE-2002-0386?
CVE-2002-0386 affects Oracle9i Application Server version 9.0.2.
Can CVE-2002-0386 lead to unauthorized access?
No, CVE-2002-0386 primarily results in a denial of service condition rather than unauthorized access.
What types of requests exploit CVE-2002-0386?
CVE-2002-0386 can be exploited using specific malformed HTTP GET requests containing a ".." (dot dot) sequence.