APP: Oracle Web Cache Insecure Version 2
This signature detects an insecure version of the Oracle Application Server Web Cache running on standard Web ports 80, 443, and possibly other ports. Because this insecure version of OAS Web Cache incorrectly handles client requests, you should upgrade to the most recent version. Attackers can send an invalid HTTP or HTTPS request to overflow the buffer and execute arbitrary code.
Extended Description
Oracle Application Server Web Cache is prone to a remotely exploitable heap overrun when handling excessive data specified in HTTP Requests. This issue could be triggered through the HTTP or HTTPS ports of the service, which are user-configurable (by default HTTP is 7777/TCP and 4443/TCP is for HTTPS). It has been reported that these ports are normally reconfigured to 80/TCP and 443/TCP for HTTP and HTTPS respectively when making the service remotely accessible. The vulnerability affects all platforms that the software runs on and may be exploited to execute arbitrary code in the context of the server process.
Affected Products
Oracle oracle9i_application_server_web_cache
Short Name
APP:ORACLE:WEBCACHE-INSECURE2
Severity
Info
Recommended
False
Recommended Action
None
Category
APP
Keywords
2 CVE-2004-0385 Cache Insecure Oracle Version Web bid:9868
Release Date
04/14/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Rarely
Vendors
Oracle
CVSS Score
10.0