Description
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
References
- 3727 vdb-entry
- VU#758483 third-party-advisory
- oracle-appserver-modplsql-traversal(7728) vdb-entry
- http://otn.oracle.com/deploy/security/pdf/modplsql.pdf
- 20011221 Buffer Overflow in Oracle 9iAS (#NISR20122001) mailing-list