Vulnerability Details CVE-2002-0857
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 83.9%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=102933735716634&w=2
- http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf
- http://securitytracker.com/id?1005037
- http://www.kb.cert.org/vuls/id/301059
- http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt
- http://www.securityfocus.com/bid/5460
- http://marc.info/?l=bugtraq&m=102933735716634&w=2
- http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf
- http://securitytracker.com/id?1005037
- http://www.kb.cert.org/vuls/id/301059
- http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt
- http://www.securityfocus.com/bid/5460
Products affected by CVE-2002-0857
-
cpe:2.3:a:oracle:database_server:7.3.4
-
cpe:2.3:a:oracle:database_server:9.0
-
cpe:2.3:a:oracle:database_server:9.2
-
cpe:2.3:a:oracle:oracle8i:8.1