Nessus Plugin #10851

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Oracle 9iAS Java Process Manager

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 Matt Moore

Summary:

Tests for Oracle9iAS Java Process Manager

Version:

$Revision: 1.8 $

Cve_id:

CAN-2002-0563

Bugtraq_id:

4293

Xrefs:

-

Description:

In a default installation of Oracle 9iAS, it is possible to access the
Java Process Manager anonymously. Access to this page should be restricted.


Solution:
Restrict access to /oprocmgr-status in httpd.conf

Risk factor : High