← back
CVE-2002-0857

CVE-2002-0857

EPSS 13.8%
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=102933735716634&w=2http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdfhttp://securitytracker.com/id?1005037http://www.kb.cert.org/vuls/id/301059http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txthttp://www.securityfocus.com/bid/5460