1. CVE-Search
  2. CVE-2002-1118
ID CVE-2002-1118
Summary TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.5.0.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.5.0.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.5.0.2_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.5.0.2_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.5.1.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.5.1.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.6.0.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.6.0.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.6.1.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.6.1.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.7.0.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.7.0.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle8i:8.1.7.1.0_enterprise:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle8i:8.1.7.1.0_enterprise:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:9.0.1_3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:9.0.1_3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-09-2008 - 00:03)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 5678
confirm http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf
vulnwatch 20021009 R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service
xf oracle-net-services-dos(10283)
Last major update 11-09-2008 - 00:03
Published 28-10-2002 - 05:00
Last modified 11-09-2008 - 00:03
Back to Top