This host is running Oracle database and is prone to denial of service vulnerability

Successful exploitation allows an attacker to cause denial of service by sending packets of type 6 - Data packets. Impact Level: Application

Apply patches from below link, http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html

The flaw is due to error in 'RDBMS' component, which allows attackers to cause a denial of service (CPU consumption) via a crafted type 6 Data packet, aka DB20.

Oracle Database 9.0.1.5, 9.2.0.8, 9.2.0.8, 10.1.0.5 and 10.2.0.3

• http://secunia.com/advisories/27409
• http://securityreason.com/securityalert/3244
• http://www.securitytracker.com/id?1018823
• http://www.us-cert.gov/cas/techalerts/TA07-290A.html

---

Updated on 2015-03-25