Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

It may be possible to make the Oracle9i application server crash or execute arbitrary code by sending it a too long url specially crafted URL.

It was possible to kill the web server by sending an invalid GET request with a long User-Agent field. A remote attacker may exploit this vulnerability to make the web server crash continually or possibly execute arbitrary code.

The remote web server crashes when it receives a too long URL. It might be possible to make it execute arbitrary code through this flaw.

ID	Name	Product	Family	Severity
11081	Oracle Application Server Web Cache HTTP Request Overflow	Nessus	Databases	critical
11069	Web Server HTTP User-Agent Header Handling Remote Overflow	Nessus	Web Servers	high
10320	Web Server Long URL Handling Remote Overflow DoS	Nessus	Web Servers	high

Detections

Analytics

CVE-2001-0836

critical

Tenable Plugins

critical

high

high