Signature Detail
Short Name |
HTTP:ORACLE:9I-APP-SERVER-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle 9i Application Server Web Cache Administration Tool Denial Of Service |
Release Date |
2013/05/02 |
Update Number |
2259 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle 9i Application Server Web Cache Administration Tool Denial Of Service
This signature detects attempts to exploit a known vulnerability against Oracle 9i Application Server. A successful attack can result in a denial-of-service condition.
Extended Description
Oracle 9i Application Server (9iAS) allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows. When a custom request is sent to the Web Administration module, the module may react unpredictably. By sending a malicious custom request to the module, it is possible to cause the administration server to crash. A manual restart of the server is required to resume service.
Affected Products
- Oracle Oracle9i Application Server 9.0.2
References
- BugTraq: 5902
- CVE: CVE-2002-0386