CVE-2002-1858: Medium severity Oracle Application Server vulnerability
Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1858?
CVE-2002-1858 is considered to be a critical vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2002-1858?
To fix CVE-2002-1858, upgrade to a patched version of the Oracle9i Application Server that addresses this vulnerability.
What systems are affected by CVE-2002-1858?
CVE-2002-1858 affects Oracle9i Application Server versions 1.0.2.2, 9.0.2 through 9.0.2.0.1 on Windows.
What type of attack does CVE-2002-1858 facilitate?
CVE-2002-1858 facilitates remote attackers in retrieving sensitive files from the WEB-INF directory.
Can CVE-2002-1858 be exploited locally?
CVE-2002-1858 is primarily a remote exploitation vulnerability and is not meant for local attacks.