high7.5Public exploit code
CVE-2000-0169
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Web Listener 4.0.x - for NT Batch File2000-03-15 · remote · windows · Verified
Impact
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Application Server | Version 4.0 |