CVE

Id
3316  
CVE No.
CVE-2001-0499  
Status
Candidate  
Description
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.  
Phase
Modified (20050509)  
Votes
ACCEPT(3) Armstrong, Cole, Ziese | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
Frech> XF:oracle-tns-listener-bo(6758) | CONFIRM:http://otn.oracle.com/deploy/security/pdf/nai_net8_bof.pdf | Christey> CERT:CA-2001-16 | URL:http://www.cert.org/advisories/CA-2001-16.html | CIAC:L-108 | URL:http://ciac.llnl.gov/ciac/bulletins/l-108.shtml | CERT-VN:VU#620495 | URL:http://www.kb.cert.org/vuls/id/620495 | BID:2941 | URL:http://www.securityfocus.com/bid/2941 | Christey> Consider adding BID:2941 | Christey> BUGTRAQ:20021126 Oracle TNS SEH Exploit | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=103833206805744&w=2 | Christey> CONFIRM:http://otn.oracle.com/deploy/security/pdf/nai_net8_bof.pdf  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14046 3316 CVE-2001-0499 NAI:20010627 Vulnerability in Oracle 8i TNS Listener  View
14047 3316 CVE-2001-0499 URL:http://www.nai.com/research/covert/advisories/050.asp  View
14048 3316 CVE-2001-0499 CERT:CA-2001-16  View
14049 3316 CVE-2001-0499 URL:http://www.cert.org/advisories/CA-2001-16.html  View
14050 3316 CVE-2001-0499 CERT-VN:VU#620495  View
14051 3316 CVE-2001-0499 URL:http://www.kb.cert.org/vuls/id/620495  View
14052 3316 CVE-2001-0499 BID:2941  View
14053 3316 CVE-2001-0499 URL:http://www.securityfocus.com/bid/2941  View
14054 3316 CVE-2001-0499 XF:oracle-tns-listener-bo(6758)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64147 JVNDB-2001-000121 Oracle Database の TNS リスナーにおけるバッファオーバーフローの脆弱性 Oracle Database の TNS リスナーにはTNS リスナーのリクエストの処理の実装に不備が存在し、大きい接続データを受信することにより、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0499 3316 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000121.html  View