CVEvulnerability

CVE-2002-0857

7.5 HIGH Published 2002-09-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-09-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Affected configurations

• oracle database server 7.3.4 • oracle database server 9.0 • oracle database server 9.2 • oracle oracle8i 8.1

References