CVE-2000-1235

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-31 · updated 2026-09-23

Description

The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.

Affected products

Oracle Application Server: through 3.0.7

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
http://online.securityfocus.com/archive/1/155881
http://www.iss.net/security_center/static/5818.php
http://www.securityfocus.com/bid/2150
http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
http://online.securityfocus.com/archive/1/155881
http://www.iss.net/security_center/static/5818.php
http://www.securityfocus.com/bid/2150

Get alerted when CVE-2000-1235 or the next vulnerability affects your stack