CVE-2002-1632: Medium severity Oracle Application Server vulnerability
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1632?
CVE-2002-1632 has a medium severity level due to its potential to expose sensitive information.
How do I fix CVE-2002-1632?
To address CVE-2002-1632, remove or restrict access to the sample pages such as info.jsp, printenv, echo, and echo2.
What kind of information can be exposed by CVE-2002-1632?
CVE-2002-1632 can expose environment variables and other sensitive information to remote attackers.
Is CVE-2002-1632 still a threat to Oracle 9i Application Server users?
Yes, CVE-2002-1632 remains a threat for users who are still running affected versions of Oracle 9i Application Server.
What versions of Oracle Application Server are affected by CVE-2002-1632?
CVE-2002-1632 affects multiple versions including Oracle Application Server 9.0.2.0.0, 9.0.2.0.1, and 1.0.2 versions.