Oracle Application Server Web Cache <= 9.0.4.0 Multiple Vulnerabilities

high Nessus Plugin ID 12126

Language:

Synopsis

The remote host has an application that is affected by a heap overflow vulnerability.

Description

The remote host is running a version of Oracle Application Server Web Cache version 9.0.4.0 or older. The installed version is affected by a heap overflow vulnerability. Provided Web Cache is running and configured to listen on Oracle Application Server Web Cache listener port and accept requests from any client it may be possible for an attacker to execute arbitrary code on the remote system.

Solution

See the Oracle advisory referenced in the URL above.

Plugin Details

Severity: High

ID: 12126

File Name: oracle_web_cache_multiple_vulns.nasl

Version: 1.23

Type: remote

Family: Databases

Published: 4/4/2004

Updated: 7/18/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:oracle:application_server_web_cache

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 3/12/2004

Vulnerability Publication Date: 3/15/2004

Reference Information

CVE: CVE-2004-0385

BID: 9868

Detections

Analytics