CVE-2002-0965 Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not prope...
HighCVSS 7.5
EPSS 69.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle9i | = 9.0 | No fix listed |
| oracle9i | = 9.0.1 | No fix listed |
| oracle9i | = 9.0.2 | No fix listed |
References
- 20020612 [VulnWatch] Oracle TNS Listener Buffer Overflow (#NISR12062002A) mailing-list
- 20020612 Oracle TNS Listener Buffer Overflow (#NISR12062002A) mailing-list
- otn.oracle.com patch vendor-advisory
- oracle-listener-servicename-bo(9288) vdb-entry
- VU#630091 third-party-advisory us-government-resource
- 4845 patch vdb-entry vendor-advisory