Beveiligingsadvies

CVE-2002-0563

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2002-06-11 04:00:00

Laatst bijgewerkt 2024-08-08 02:56:37

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.

← Alle CVE's bekijken Bekijk op cve.org ↗