Description

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Remediation

References

CVE-2002-0857

Related Vulnerabilities

Squid Uncontrolled Resource Consumption Vulnerability (CVE-2021-46784)

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.24)

Joomla! Core 3.x.x Local File Inclusion (3.0.0 - 3.9.25)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.39)

MySQL CVE-2022-21367 Vulnerability (CVE-2022-21367)

Severity

High

Classification

CVE-2002-0857

Tags

Missing Update Known Vulnerabilities