CVE-2004-1362 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2004-1362

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-04 Aug, 2004 | 04:00

Updated At-03 Apr, 2025 | 01:03

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Oracle Corporation

>>application_server>>*

cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2

cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2.0.0

cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2.0.1

cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2.1

cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2.2

cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.2.3

cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.3

cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.3.1

cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.4

cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.4.0

cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*

Oracle Corporation

>>application_server>>9.0.4.1

cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*

Oracle Corporation

>>collaboration_suite>>release_1

cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.1

cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.2

cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.3

cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.4

cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.5

cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.6

cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.7

cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.8

cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*

Oracle Corporation

>>e-business_suite>>11.5.9

cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*

Oracle Corporation

>>enterprise_manager>>9

cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*

Oracle Corporation

>>enterprise_manager>>9.0.1

cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*

Oracle Corporation

>>enterprise_manager_database_control>>10.1.2

cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*

Oracle Corporation

>>enterprise_manager_grid_control>>10.1.0.2

cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>enterprise_9.0.4_.0

cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>enterprise_10.1.0.2

cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>personal_9.0.4_.0

cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>personal_10.1_.0.2

cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>standard_9.0.4_.0

cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle10g>>standard_10.1_.0.2

cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.0.5_.0.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.0.6_.0.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.0.6_.0.1

cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.5_.0.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.5_.0.2

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.5_.1.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.6_.0.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.6_.1.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.7_.0.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.7_.1.0

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>enterprise_8.1.7_.4

cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.0.6

cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.0.6_.3

cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.1.5

cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.1.6

cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.1.7

cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.1.7_.0.0

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>oracle8i>>standard_8.1.7_.1

cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://marc.info/?l=bugtraq&m=110382306006205&w=2	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1	cve@mitre.org	N/A
http://www.kb.cert.org/vuls/id/435974	cve@mitre.org	Third Party Advisory US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004G.txt	cve@mitre.org	Patch Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/10871	cve@mitre.org	Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.html	cve@mitre.org	Patch Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18657	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=110382306006205&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/435974	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004G.txt	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/10871	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.html	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18657	af854a3a-2127-422b-91ae-364da2661108	N/A