Description

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.

Remediation

References

CVE-2007-2120

Related Vulnerabilities

Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)

MySQL CVE-2020-14553 Vulnerability (CVE-2020-14553)

WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Privilege Escalation (2.3.3)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-0819)

Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4906)

Severity

High

Classification

CVE-2007-2120

Tags

Missing Update Known Vulnerabilities