CVE-2002-0386

The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.

• http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdfPatch, Vendor Advisory
• http://www.atstake.com/research/advisories/2002/a102802-1.txtExploit, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/10284.php
• http://www.securityfocus.com/bid/5902
• http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdfPatch, Vendor Advisory
• http://www.atstake.com/research/advisories/2002/a102802-1.txtExploit, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/10284.php
• http://www.securityfocus.com/bid/5902

Published

Nov 4, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0379Buffer overflow in University of Washington imap server (uw-…
• CVE-2002-0380Buffer overflow in tcpdump 3.6.2 and earlier allows remote a…
• CVE-2002-0381The TCP implementation in various BSD operating systems (tcp…
• CVE-2002-0382XChat IRC client allows remote attackers to execute arbitrar…
• CVE-2002-0384Buffer overflow in Jabber plug-in for Gaim client before 0.5…
• CVE-2002-0385Vignette Story Server 4.1 and 6.0 allows remote attackers to…
• CVE-2002-0387Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connecto…
• CVE-2002-0388Cross-site scripting vulnerabilities in Mailman before 2.0.1…
• CVE-2002-0389Pipermail in Mailman stores private mail messages with predi…
• CVE-2002-0390Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2002-0391Integer overflow in xdr_array function in RPC servers for op…9.8
• CVE-2002-0392Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, al…