CVE

Id
5247  
CVE No.
CVE-2002-0857  
Status
Candidate  
Description
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.  
Phase
Modified (20050510)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Wall | MODIFY(1) Frech | NOOP(3) Christey, Cox, Foat  
Comments
Christey> XF:oracle-lsnrctl-format-string(9832) | URL:http://www.iss.net/security_center/static/9832.php | CERT-VN:VU#301059 | URL:http://www.kb.cert.org/vuls/id/301059 | BID:5460 | URL:http://www.securityfocus.com/bid/5460 | MISC:http://www.nextgenss.com/advisories/ora-lsnrfmtstr.txt | Frech> XF:oracle-lsnrctl-format-string(9832)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28025 5247 CVE-2002-0857 BUGTRAQ:20020814 Oracle Listener Control Format String Vulnerabilities (#NISR14082002)  View
28026 5247 CVE-2002-0857 URL:http://marc.info/?l=bugtraq&m=102933735716634&w=2  View
28027 5247 CVE-2002-0857 MISC:http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt  View
28028 5247 CVE-2002-0857 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf  View
28029 5247 CVE-2002-0857 CERT-VN:VU#301059  View
28030 5247 CVE-2002-0857 URL:http://www.kb.cert.org/vuls/id/301059  View
28031 5247 CVE-2002-0857 BID:5460  View
28032 5247 CVE-2002-0857 URL:http://www.securityfocus.com/bid/5460  View
28033 5247 CVE-2002-0857 SECTRACK:1005037  View

Related JVN