Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of . characters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_server_web_cache | Oracle | 2.0.0.0 (including) | 2.0.0.0 (including) |
| Application_server_web_cache | Oracle | 2.0.0.1 (including) | 2.0.0.1 (including) |
| Application_server_web_cache | Oracle | 2.0.0.2 (including) | 2.0.0.2 (including) |
References
- http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
- http://www.securityfocus.com/bid/3760
- http://www.securityfocus.com/bid/3762
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7765
- http://otn.oracle.com/deploy/security/pdf/webcache2.pdf
- http://www.securityfocus.com/bid/3760
- http://www.securityfocus.com/bid/3762
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7765