NVD

Id
43546  
Name
CVE-2012-1675  
Description
The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka "TNS Poison."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-08  
Modified Date
2014-09-08  
Seq
2012-1675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218857 43546 CVE-2012-1675 SUSE-SU-2012:0765  View
218858 43546 CVE-2012-1675 20120418 The history of a -probably- 13 years old Oracle bug: TNS Poison  View
218859 43546 CVE-2012-1675 20120428 Oracle TNS Poison vulnerability is actually a 0day with no patch available  View
218860 43546 CVE-2012-1675 VU#359816  View
218861 43546 CVE-2012-1675 MDVSA-2013:150  View
218862 43546 CVE-2012-1675 http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html  View
218863 43546 CVE-2012-1675 53308  View
218864 43546 CVE-2012-1675 1027000  View
218865 43546 CVE-2012-1675 oracledatabase-tnslistener-spoofing(75303)  View
218866 43546 CVE-2012-1675 https://blogs.oracle.com/security/entry/security_alert_for_cve_2012  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26527 JVNDB-2012-002234 Oracle データベース TNS リスナーに脆弱性 Oracle データベースコンポーネントの TNS リスナーには、遠隔の第三者が認証なしにデータベースサービスを登録できる脆弱性が存在します。 CVE-2012-1675 54913 CVE-2012-1675 43546 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002234.html 2012-05-02 2014-06-23 View