Oracle 9i Application Server mod_oradav Module Format String Vulnerability

Bugtraq ID:	6851
Class:	Input Validation Error
CVE:	CVE-2002-0842
Remote:	Yes
Local:	No
Published:	Feb 11 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	Discovery of this vulnerability credited to David and Mark Litchfield.
Vulnerable:	Oracle Oracle9i Application Server 9.0.3 Oracle Oracle9i Application Server 9.0.2
Not Vulnerable:

Oracle 9i Application Server mod_oradav Module Format String Vulnerability

A vulnerability has been reported for Oracle 9i Application Server when the mod_oradav module is used.

Reportedly, an attacker may be able to exploit an issue with Oracle's 'dav_public' or 'dav_portal' folders and execute arbitrary code. This is due to an exploitable format string error in the mod_oradav module.

Oracle 9i Application Server mod_oradav Module Format String Vulnerability

Solution:
Oracle has made fixes available. Administrators can download the patches at http://metalink.oracle.com and entering Bug Number 2602262.

The attached Oracle advisory also contains a release schedule for patches across all supported platforms.

Oracle 9i Application Server mod_oradav Module Format String Vulnerability

References:

• Oracle Security Alert #52 (Oracle)
  
• Vulnerability Note VU#849993 (CERT/CC)
  
• Oracle9i Application Server Format String Vulnerability (#NISR16022003d) ("NGSSoftware Insight Security Research" )