## Description

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### oracle - application_server

Affected Versions:

- 4.0

## References

- http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html
- http://www.securityfocus.com/bid/1053
- http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html
- http://www.securityfocus.com/bid/1053

Neural Processor Active