ID de Prueba:	1.3.6.1.4.1.25623.1.0.11227
Categoría:	Web application abuses
Título:	Oracle 9iAS SOAP Default Configuration Vulnerability (HTTP)
Resumen:	In a default installation of Oracle 9iAS v.1.0.2.2, it is possible to; deploy or undeploy SOAP services without the need of any kind of credentials.
Descripción:	Summary: In a default installation of Oracle 9iAS v.1.0.2.2, it is possible to deploy or undeploy SOAP services without the need of any kind of credentials. Vulnerability Insight: This is due to SOAP being enabled by default after installation in order to provide a convenient way to use SOAP samples. However, this feature poses a threat to HTTP servers with public access since remote attackers can create soap services and then invoke them remotely. Since SOAP services can contain arbitrary Java code in Oracle 9iAS this means that an attacker can execute arbitrary code in the remote server. Solution: Disable SOAP or the deploy/undeploy feature by editing: $ORACLE_HOME/Apache/Jserver/etc/jserv.conf and removing/commenting the following four lines: ApJServGroup group2 1 1 $ORACLE_HOME/Apache/Jserv/etc/jservSoap.properties ApJServMount /soap/servlet ajpv12://localhost:8200/soap ApJServMount /dms2 ajpv12://localhost:8200/soap ApJServGroupMount /soap/servlet balance://group2/soap Note that the port number might be different from 8200. Also, you will need to change in the file: $ORACLE_HOME/soap/werbapps/soap/WEB-INF/config/soapConfig.xml: to CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2001-1371 BugTraq ID: 4289 http://www.securityfocus.com/bid/4289 Bugtraq: 20020206 Hackproofing Oracle Application Server paper (Google Search) http://marc.info/?l=bugtraq&m=101301813117562&w=2 http://www.cert.org/advisories/CA-2002-08.html CERT/CC vulnerability note: VU#736923 http://www.kb.cert.org/vuls/id/736923 http://www.nextgenss.com/papers/hpoas.pdf http://www.iss.net/security_center/static/8449.php
Copyright	Copyright (C) 2003 Javier Fernandez-Sanguino

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.