CVE-2002-0857 in Database Server

Riassunto

di MITRE

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Divulgazione: 05/09/2002
• Moderazione: accettato
• Voce: VDB-18753
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.13789
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0857
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0857
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0857/