CVE-2002-0857
Published Sep 5, 2002
Last updated 8 years ago
Overview
- Description
- Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE07BAF7-3A9A-426B-9536-72EAB8984A4F"
},
{
"criteria": "cpe:2.3:a:oracle:database_server:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC3C795-3914-4941-9244-D4FB9C12C7F9"
},
{
"criteria": "cpe:2.3:a:oracle:database_server:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D159781-4109-4A9B-A46B-241021FED68E"
},
{
"criteria": "cpe:2.3:a:oracle:oracle8i:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44943278-DF79-4C58-AA98-B3FEA6CB8F21"
}
],
"operator": "OR"
}
]
}
]