CVE-2004-0385

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-06-01 · updated 2026-06-16

Description

Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."

Affected products

Oracle Application Server Web Cache: 9.0.0.4.0, 9.0.2.3.0, 9.0.3.1.0, 9.0.4.0.0
Oracle E-Business Suite: 11i

References

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html
http://marc.info/?l=bugtraq&m=107945649127635&w=2
http://marc.info/?l=bugtraq&m=108144419001770&w=2
http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf
http://secunia.com/advisories/11118
http://www.inaccessnetworks.com/ian/services/secadv01.txt
http://www.kb.cert.org/vuls/id/413006
http://www.osvdb.org/4249
http://www.securityfocus.com/bid/9868
https://exchange.xforce.ibmcloud.com/vulnerabilities/15463
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html
http://marc.info/?l=bugtraq&m=107945649127635&w=2

Get alerted when CVE-2004-0385 or the next vulnerability affects your stack