Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Remediation

References

CVE-2002-1632

Related Vulnerabilities

MySQL CVE-2024-21160 Vulnerability (CVE-2024-21160)

PostgreSQL Improper Certificate Validation Vulnerability (CVE-2012-0867)

e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2020)

WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Scripting (3.0.38)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1279)

Severity

Medium

Classification

CVE-2002-1632

Tags

Missing Update Known Vulnerabilities