Secunia

Oracle has reported that a vulnerability has been discovered in Oracle Web Cache.

The problem is a boundary error in the handling of the HTTP request method header in "webcached". This can be exploited to cause a heap overflow by supplying a 432 character long request method, potentially allowing execution of arbitrary code

The vendor reports that successful exploitation requires that Web Cache is running and configured to listen on the Oracle Application Server Web Cache listener port for client requests.

The following versions are reportedly vulnerable:
* Oracle Application Server Web Cache 10g (9.0.4.0.0)
* Oracle9iAS Web Cache 9.0.3.1.0
* Oracle9iAS Web Cache 9.0.2.3.0
* Oracle9iAS Web Cache 2.0.0.4.0

According to the vendor, all Oracle supported platforms are affected except Oracle Application Server Web Cache 10g (9.0.4.0.0) on Windows, Tru64, and AIX (release pending), which already contain fixes.

Solution
See Patch Availability Matrix in MetaLink Document ID 265310.1:
Further details available in Customer Area

Provided and/or discovered by
Ioannis Migadakis

Changelog
Further details available in Customer Area

Original Advisory
http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf

http://www.inaccessnetworks.com/ian/services/secadv01.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area