CVE-2001-1216 - Vulnerability Details - OpenCVE

Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Oracle	Application Server

Configuration 1 [-]

cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://otn.oracle.com/deploy/security/pdf/modplsql.pdf
http://www.iss.net/security_center/static/7727.php
http://www.kb.cert.org/vuls/id/500203
http://www.securityfocus.com/archive/1/246663
http://www.securityfocus.com/bid/3726

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-03-15T05:00:00

Updated: 2024-08-08T04:51:08.199Z

Reserved: 2002-03-15T00:00:00

Link: CVE-2001-1216

Vulnrichment

No data.

NVD

Status : Modified

Published: 2001-12-21T05:00:00.000

Modified: 2024-11-20T23:37:10.320

Link: CVE-2001-1216

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2001-12-21T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2002-03-22T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "VU#500203", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/500203"}, {"name": "oracle-appserver-modplsql-bo(7727)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/7727.php"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf"}, {"name": "3726", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/3726"}, {"name": "20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001)", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/246663"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2001-1216", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "VU#500203", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/500203"}, {"name": "oracle-appserver-modplsql-bo(7727)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/7727.php"}, {"name": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf", "refsource": "CONFIRM", "url": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf"}, {"name": "3726", "refsource": "BID", "url": "http://www.securityfocus.com/bid/3726"}, {"name": "20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001)", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/246663"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T04:51:08.199Z"}, "title": "CVE Program Container", "references": [{"name": "VU#500203", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/500203"}, {"name": "oracle-appserver-modplsql-bo(7727)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "http://www.iss.net/security_center/static/7727.php"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf"}, {"name": "3726", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/3726"}, {"name": "20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001)", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/246663"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2001-1216", "datePublished": "2002-03-15T05:00:00", "dateReserved": "2002-03-15T00:00:00", "dateUpdated": "2024-08-08T04:51:08.199Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "CC62E1B2-6964-4459-A1EF-A6A087C2960F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page."}, {"lang": "es", "value": "Desbordamiento de buffer en el m\u00f3dulo de Apache PL/SQL en en Oracle 9i Application Server permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una petici\u00f3n larga a una p\u00e1gina de ayuda."}], "id": "CVE-2001-1216", "lastModified": "2024-11-20T23:37:10.320", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2001-12-21T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/7727.php"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/500203"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.securityfocus.com/archive/1/246663"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/3726"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://otn.oracle.com/deploy/security/pdf/modplsql.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/7727.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/500203"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.securityfocus.com/archive/1/246663"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/3726"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}