CVE-2005-3207 The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
MediumCVSS 5.0
EPSS 19.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle forms | = 4.5.10.22 | No fix listed |
| oracle forms | = 5.0 | No fix listed |
| oracle forms | = 6.0.8.25 | No fix listed |
| oracle forms | = 6i | No fix listed |
| oracle forms | = 9i | No fix listed |
| oracle forms | = 10g | No fix listed |
References
- 20051007 Shutdown TNS Listener via Oracle Forms Servlet exploit mailing-list vendor-advisory
- 20051007 Shutdown TNS Listener via Oracle Forms Servlet mailing-list
- 15991 third-party-advisory
- 65 third-party-advisory
- www.oracle.com patch
- www.red-database-security.com exploit vendor-advisory
- 15039 exploit vdb-entry
- oracle-forms-tns-dos(22543) vdb-entry