CVE-2004-0385: Buffer Overflow
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0385?
CVE-2004-0385 is rated as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2004-0385?
To fix CVE-2004-0385, it is recommended to update to the latest patched version of Oracle Application Server Web Cache.
What does CVE-2004-0385 exploit?
CVE-2004-0385 exploits a heap-based buffer overflow vulnerability caused by overly long HTTP request method headers.
Which versions are affected by CVE-2004-0385?
CVE-2004-0385 affects Oracle Application Server Web Cache versions 9.0.0.4.0, 9.0.2.3.0, 9.0.3.1.0, and 9.0.4.0.0.
Can CVE-2004-0385 lead to unauthorized access?
Yes, CVE-2004-0385 can lead to unauthorized remote code execution, potentially compromising the affected systems.