Description

The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.

Remediation

References

CVE-2000-1235

Related Vulnerabilities

WordPress Plugin Music Store Cross-Site Scripting (1.0.41)

WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader Multiple Security Bypass Vulnerabilities (1.2.4)

WordPress Plugin Portfolio Gallery-Photo Gallery Multiple Unspecified Vulnerabilities (2.0.72)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35413)

WordPress Plugin Integration for Contact Form 7 HubSpot Cross-Site Scripting (1.1.9)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2000-1235