← Back

CVE-2002-0561

nvd nist
Published: Jul 3, 2002Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.

Affected (9)

Oracle
4 products
Application Server
Application Server Web Cache
Oracle8i
Oracle9i
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Application Server
Version 1.0.2
Oracle
Application Server Web Cache
Version 2.0.0.0
Application Server Web Cache
Version 2.0.0.1
Application Server Web Cache
Version 2.0.0.2
Application Server Web Cache
Version 2.0.0.3
Oracle
Oracle8i
Version 8.1.7
Oracle8i
Version 8.1.7_.1
Oracle
Oracle9i
Version 9.0.1
Oracle9i
Version 9.0

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.