NVD

Id
54290  
Name
CVE-2007-2120  
Description
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP commmand in a request that uses the database/TNS alias, aka AS01.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-04-18  
Modified Date
2012-10-22  
Seq
2007-2120  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275284 54290 CVE-2007-2120 http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html  View
275285 54290 CVE-2007-2120 http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html  View
275286 54290 CVE-2007-2120 http://www.red-database-security.com/advisory/oracle_discoverer_servlet.html  View
275287 54290 CVE-2007-2120 20070418 Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01]  View
275288 54290 CVE-2007-2120 SSRT061201  View
275289 54290 CVE-2007-2120 23532  View
275290 54290 CVE-2007-2120 1017927  View
275291 54290 CVE-2007-2120 TA07-108A  View
275292 54290 CVE-2007-2120 ADV-2007-1426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51622 JVNDB-2007-000285 Oracle Application Server の Oracle Discoverer サーブレットに関するサービス運用妨害 (DoS) の脆弱性 Oracle Application Server には、Oracle Discoverer サーブレットを介して TNS STOP コマンドを送信することで、Oracle TNS Listener がシャットダウンする脆弱性が存在します。(AS01) CVE-2007-2120 25475 CVE-2007-2120 54290 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000285.html 2007-04-17 2007-05-15 View