CVE-2002-0857 | BDVDB-2026-4525 Detail

Description#

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf
http://www.kb.cert.org/vuls/id/301059
http://securitytracker.com/id?1005037
http://www.securityfocus.com/bid/5460
http://marc.info/?l=bugtraq&m=102933735716634&w=2
http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt

Exploit#

No public exploit known

History#

Version 12002-08-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.