CVE-2002-1632

Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/8665

http://www.securityfocus.com/bid/6556

http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf

http://www.nextgenss.com/papers/hpoas.pdf

http://www.kb.cert.org/vuls/id/SVIM-576QLZ

http://www.kb.cert.org/vuls/id/717827

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS