Detections
Analytics

Oracle Application Server ndwfn4.so HTTP Request Remote Overflow

high Nessus Plugin ID 10654

Synopsis

Arbitrary code may be run on the remote server.

Description

It may be possible to make a web server execute arbitrary code by sending it a too long url starting with /jsp/ For example: GET /jsp/AAAA.....AAAAA

Solution

Contact your vendor for the latest software release.

Plugin Details

Severity: High

ID: 10654

File Name: oas_overflow.nasl

Version: 1.27

Type: remote

Family: Databases

Published: 4/16/2001

Updated: 7/16/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:oracle:application_server

Required KB Items: Settings/ParanoidReport

Excluded KB Items: www/too_long_url_crash

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 4/10/2001

Reference Information

CVE: CVE-2001-0419

BID: 2569