critical10.0Public exploit code
CVE-2001-0499
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle 8i - TNS Listener Buffer Overflow2001-07-20 · remote · windows · Verified
- Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)2010-11-24 · remote · windows · Verified
Impact
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Oracle8i | through 8.1.7 |
References
- NVD record
- CVE.org record
- http://www.cert.org/advisories/CA-2001-16.html
- http://www.kb.cert.org/vuls/id/620495
- http://www.nai.com/research/covert/advisories/050.asp
- http://www.securityfocus.com/bid/2941
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6758
- http://www.cert.org/advisories/CA-2001-16.html
- http://www.kb.cert.org/vuls/id/620495
- http://www.nai.com/research/covert/advisories/050.asp
- http://www.securityfocus.com/bid/2941
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6758