NetSight
IP …
high7.5

CVE-2002-0564

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modi…

Impact

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Affected products

VendorProductAffected versions
OracleApplication Server
Version 1.0.2
OracleApplication Server Web Cache
Versions 2.0.0.0, 2.0.0.1, 2.0.0.2, 2.0.0.3
OracleOracle8i
Versions 8.1.7, 8.1.7.1
OracleOracle9i
Versions 9.0, 9.0.1

References