7.5
CVE-2002-0561
- EPSS 9.67%
- Veröffentlicht 03.07.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:57:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Server Version1.0.2
Oracle ≫ Application Server Web Cache Version2.0.0.0
Oracle ≫ Application Server Web Cache Version2.0.0.1
Oracle ≫ Application Server Web Cache Version2.0.0.2
Oracle ≫ Application Server Web Cache Version2.0.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.67% | 0.949 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=101301813117562&w=2
http://www.cert.org/advisories/CA-2002-08.html
http://www.nextgenss.com/papers/hpoas.pdf
http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf
http://www.kb.cert.org/vuls/id/611776
http://www.securityfocus.com/bid/4292