CVE-2005-1383: High severity Oracle Application Server vulnerability
Published May 2, 2005
·Updated
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server modaccess restrictions via a request to the webcache TCP port 7778.
Affected Software
4 affected components
Oracle Application Server=10.1.0.2
Oracle Application Server=10.1.0.3
Oracle Application Server=10.1.0.3.1
Oracle Application Server=10.1.2
Remediation
Patch Available
Patch Available
Event History
May 2, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1383?
CVE-2005-1383 has a medium severity level, indicating a moderate risk to affected systems.
2
How do I fix CVE-2005-1383?
To fix CVE-2005-1383, ensure that the UseWebcacheIP option is enabled in the Oracle Application Server configuration.
3
Which versions of Oracle Application Server are affected by CVE-2005-1383?
CVE-2005-1383 affects Oracle Application Server versions 10.1.0.2, 10.1.0.3, 10.1.0.3.1, and 10.1.2.
4
What exploit does CVE-2005-1383 enable for attackers?
CVE-2005-1383 allows attackers to bypass HTTP Server mod_access restrictions through specific TCP requests.
5
Is there a public exploit available for CVE-2005-1383?
Yes, CVE-2005-1383 is known to have public exploit code that can be used to demonstrate the vulnerability.