- Description
- Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
- Source
- cve@mitre.org
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE07BAF7-3A9A-426B-9536-72EAB8984A4F"
},
{
"criteria": "cpe:2.3:a:oracle:database_server:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC3C795-3914-4941-9244-D4FB9C12C7F9"
},
{
"criteria": "cpe:2.3:a:oracle:database_server:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D159781-4109-4A9B-A46B-241021FED68E"
},
{
"criteria": "cpe:2.3:a:oracle:oracle8i:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44943278-DF79-4C58-AA98-B3FEA6CB8F21"
}
],
"operator": "OR"
}
]
}
]