Detections
Analytics
CVE-2002-0857
critical
Description
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
References
http://www.securityfocus.com/bid/5460
http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt
http://www.kb.cert.org/vuls/id/301059
http://securitytracker.com/id?1005037
http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf