Description
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type.
References
- CA-2002-08 third-party-advisory
- 4037 vdb-entry
- VU#805915 third-party-advisory
- http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf
- oracle-appserver-plsql-pls-dos(8099) vdb-entry