| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 1.0.2 | |
| application server web cache | = 2.0.0.0= 2.0.0.1= 2.0.0.2= 2.0.0.3 | |
| oracle8i | = 8.1.7= 8.1.7_.1 | |
| oracle9i | = 9.0= 9.0.1 |
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free