CVE-2002-0561: High severity Oracle Oracle9i vulnerability
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0561?
CVE-2002-0561 is considered to have a high severity due to its potential for unauthorized access and privilege escalation.
How do I fix CVE-2002-0561?
To fix CVE-2002-0561, configure authentication for the PL/SQL Gateway web administration interface to prevent null authentication.
What are the potential impacts of CVE-2002-0561?
The impacts of CVE-2002-0561 can include unauthorized modification of DAD settings and potentially full control over the application server.
Which versions of Oracle products are affected by CVE-2002-0561?
CVE-2002-0561 affects Oracle Application Server 1.0.2.x, Oracle Application Server Web Cache 2.0.0.x, and Oracle 8i and 9i versions.
Who can exploit CVE-2002-0561?
Remote attackers can exploit CVE-2002-0561 to gain privileges and access sensitive configurations due to its null authentication vulnerability.