CVE-2002-0560: Medium severity Oracle Application Server vulnerability
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWAUTIL stored procedures (1) OWAUTIL.signature, (2) OWAUTIL.listprint, or (3) OWAUTIL.showquerycolumns.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0560?
CVE-2002-0560 is considered a medium severity vulnerability due to the potential for information disclosure.
How do I fix CVE-2002-0560?
To fix CVE-2002-0560, you should apply the available patches from Oracle for the affected versions of their software.
Which versions are affected by CVE-2002-0560?
CVE-2002-0560 affects Oracle Application Server versions 1.0.2.x and various versions of Oracle 8i and Oracle 9i.
What type of attack does CVE-2002-0560 allow?
CVE-2002-0560 allows remote attackers to obtain sensitive information by exploiting certain stored procedures.
Are there any mitigation strategies for CVE-2002-0560?
In addition to patching, restricting access to the affected stored procedures can help mitigate the risks associated with CVE-2002-0560.