Oracle9i Application Server Web Cache HTTP Request Method buffer overflow
| oracle-webcache-http-bo (15463) |  High Risk |
Description:
Oracle9i Application Server Web Cache is vulnerable to a heap-based buffer overflow. If the Web Cache, listening on the Oracle Application Server Web Cache listener port, is configured to listen for any client request, including requests that originate from a Web server of a different type, a remote attacker could send an HTTP Request Method header containing 432 bytes to overflow a buffer and execute arbitrary code on the system.
Consequences:
Gain Access
Remedy:
Apply the appropriate patch for your system, as listed in Oracle Security Alert #66. See References.
References:
- Oracle Security Alert #66: Vulnerabilities in Oracle Application Server Web Cache.
- SANS Handler's Diary March 13th 2004: Oracle Application Server Web Cache Vulnerabilities; Port 65506.
- VulnWatch Mailing List, Thu Apr 08 2004 - 07:48:43 CDT: Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache.
- BID-9868: Oracle Application Server Web Cache HTTP Request Method Heap Overrun Vulnerability
- CVE-2004-0385: Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple vulnerabilities.
- SA11118: Oracle Web Cache HTTP Request Method Heap Overflow Vulnerability
- US-CERT VU#413006: Oracle Application Server Web Cache contains heap overflow vulnerability
Platforms Affected:
- Oracle Application Server Web Cache 2.0.0.4
- Oracle Application Server Web Cache 9.0.2.3.0
- Oracle Application Server Web Cache 9.0.3.1.0
- Oracle Application Server Web Cache 9.0.4.0.0
Reported:
Mar 12, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net