CVE-2002-0857

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf	Patch Vendor Advisory
http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt
http://www.kb.cert.org/vuls/id/301059	US Government Resource
http://www.securityfocus.com/bid/5460
http://securitytracker.com/id?1005037
http://marc.info/?l=bugtraq&m=102933735716634&w=2

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:oracle8i:8.1:::::::*
	cpe:2.3:a:oracle:database_server:7.3.4:::::::*
	cpe:2.3:a:oracle:database_server:9.0:::::::*
	cpe:2.3:a:oracle:database_server:9.2:::::::*

Information

Published : 2002-09-04 21:00

Updated : 2016-10-17 19:22

NVD link : CVE-2002-0857

Mitre link : CVE-2002-0857

JSON object : View

CWE

NVD-CWE-Other

Products Affected

oracle

oracle8i
database_server

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf", "name": "http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt", "name": "http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt", "tags": [], "refsource": "MISC"}, {"url": "http://www.kb.cert.org/vuls/id/301059", "name": "VU#301059", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.securityfocus.com/bid/5460", "name": "5460", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1005037", "name": "1005037", "tags": [], "refsource": "SECTRACK"}, {"url": "http://marc.info/?l=bugtraq&m=102933735716634&w=2", "name": "20020814 Oracle Listener Control Format String Vulnerabilities (#NISR14082002)", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2002-0857", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2002-09-05T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:oracle:oracle8i:8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:database_server:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:oracle:database_server:9.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-10-18T02:22Z"}

7.5 /10