Signature Detail
Short Name |
HTTP:ORACLE:CONF-ACCESS |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Configuration Disclosure Anonymous Access |
Release Date |
2006/10/20 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle Configuration Disclosure Anonymous Access
This signature detects attemps to access configuration files. These files contain sensitive information about Oracle services configuration.
Extended Description
Oracle 9iAS installations include the Apache web server and several Apache services which are installed by default. On default installations of Oracle 9iAS, unauthenticated remote users can view sensitive services, including Dynamic Monitoring Services.
Affected Products
- Oracle Oracle9i Application Server
References