What is CVE-2002-0386?

CVE-2002-0386 is a vulnerability in Oracle Application Server. Published 2002-11-04.

Is CVE-2002-0386 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Application Server

CVE-2002-0386

The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.

EPSS: 0.220 (97.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Application_server — versions 9.0.2
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_ATSTAKE, Exploit, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2002-0386?: CVE-2002-0386 is a vulnerability in Oracle Application Server. Published 2002-11-04.
Is CVE-2002-0386 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.