CVE-2004-1362

First published: Wed Aug 04 2004(Updated: )

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• collector/nvd-historical
• agent/weakness
• agent/references
• agent/severity
• agent/author
• agent/type
• agent/event
• agent/description
• agent/remedy
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/oracle
• canonical/oracle application server
• version/oracle application server/9.0.2
• version/oracle application server/9.0.2.0.0
• version/oracle application server/9.0.2.0.1
• version/oracle application server/9.0.2.1
• version/oracle application server/9.0.2.2
• version/oracle application server/9.0.2.3
• version/oracle application server/9.0.3
• version/oracle application server/9.0.3.1
• version/oracle application server/9.0.4
• version/oracle application server/9.0.4.0
• version/oracle application server/9.0.4.1
• canonical/oracle collaboration suite
• version/oracle collaboration suite/release_1
• canonical/oracle e-business suite
• version/oracle e-business suite/11.5.1
• version/oracle e-business suite/11.5.2
• version/oracle e-business suite/11.5.3
• version/oracle e-business suite/11.5.4
• version/oracle e-business suite/11.5.5
• version/oracle e-business suite/11.5.6
• version/oracle e-business suite/11.5.7
• version/oracle e-business suite/11.5.8
• version/oracle e-business suite/11.5.9
• canonical/oracle enterprise manager
• version/oracle enterprise manager/9
• version/oracle enterprise manager/9.0.1
• canonical/oracle enterprise manager database control
• version/oracle enterprise manager database control/10.1.2
• canonical/oracle enterprise manager grid control
• version/oracle enterprise manager grid control/10.1.0.2
• canonical/oracle oracle10g
• version/oracle oracle10g/enterprise_9.0.4_.0
• version/oracle oracle10g/enterprise_10.1.0.2
• version/oracle oracle10g/personal_9.0.4_.0
• version/oracle oracle10g/personal_10.1_.0.2
• version/oracle oracle10g/standard_9.0.4_.0
• version/oracle oracle10g/standard_10.1_.0.2
• canonical/oracle oracle8i
• version/oracle oracle8i/enterprise_8.0.5_.0.0
• version/oracle oracle8i/enterprise_8.0.6_.0.0
• version/oracle oracle8i/enterprise_8.0.6_.0.1
• version/oracle oracle8i/enterprise_8.1.5_.0.0
• version/oracle oracle8i/enterprise_8.1.5_.0.2
• version/oracle oracle8i/enterprise_8.1.5_.1.0
• version/oracle oracle8i/enterprise_8.1.6_.0.0
• version/oracle oracle8i/enterprise_8.1.6_.1.0
• version/oracle oracle8i/enterprise_8.1.7_.0.0
• version/oracle oracle8i/enterprise_8.1.7_.1.0
• version/oracle oracle8i/enterprise_8.1.7_.4
• version/oracle oracle8i/standard_8.0.6
• version/oracle oracle8i/standard_8.0.6_.3
• version/oracle oracle8i/standard_8.1.5
• version/oracle oracle8i/standard_8.1.6
• version/oracle oracle8i/standard_8.1.7
• version/oracle oracle8i/standard_8.1.7_.0.0
• version/oracle oracle8i/standard_8.1.7_.1
• version/oracle oracle8i/standard_8.1.7_.4
• canonical/oracle oracle9i
• version/oracle oracle9i/client_9.2.0.1
• version/oracle oracle9i/client_9.2.0.2
• version/oracle oracle9i/enterprise_8.1.7
• version/oracle oracle9i/enterprise_9.0.1
• version/oracle oracle9i/enterprise_9.0.1.4
• version/oracle oracle9i/enterprise_9.0.1.5
• version/oracle oracle9i/enterprise_9.2.0
• version/oracle oracle9i/enterprise_9.2.0.1
• version/oracle oracle9i/enterprise_9.2.0.2
• version/oracle oracle9i/enterprise_9.2.0.3
• version/oracle oracle9i/enterprise_9.2.0.4
• version/oracle oracle9i/enterprise_9.2.0.5
• version/oracle oracle9i/personal_8.1.7
• version/oracle oracle9i/personal_9.0.1
• version/oracle oracle9i/personal_9.0.1.4
• version/oracle oracle9i/personal_9.0.1.5
• version/oracle oracle9i/personal_9.2
• version/oracle oracle9i/personal_9.2.0.1
• version/oracle oracle9i/personal_9.2.0.2
• version/oracle oracle9i/personal_9.2.0.3
• version/oracle oracle9i/personal_9.2.0.4
• version/oracle oracle9i/personal_9.2.0.5
• version/oracle oracle9i/standard_8.1.7
• version/oracle oracle9i/standard_9.0
• version/oracle oracle9i/standard_9.0.1
• version/oracle oracle9i/standard_9.0.1.2
• version/oracle oracle9i/standard_9.0.1.3
• version/oracle oracle9i/standard_9.0.1.4
• version/oracle oracle9i/standard_9.0.1.5
• version/oracle oracle9i/standard_9.0.2
• version/oracle oracle9i/standard_9.2
• version/oracle oracle9i/standard_9.2.0.1
• version/oracle oracle9i/standard_9.2.0.2
• version/oracle oracle9i/standard_9.2.0.3
• version/oracle oracle9i/standard_9.2.0.4
• version/oracle oracle9i/standard_9.2.0.5