medium5.0Public exploit code
CVE-2005-3206
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP reques…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle 9.0 iSQL*Plus - TLS Listener Remote Denial of Service2005-10-07 · dos · multiple · Verified
Impact
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Database Server | Version 9.0.2.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html
- http://marc.info/?l=bugtraq&m=112870589127719&w=2
- http://secunia.com/advisories/15991/
- http://securityreason.com/securityalert/64
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
- http://www.osvdb.org/20056
- http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html
- http://www.securityfocus.com/bid/15032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22544
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html
- http://marc.info/?l=bugtraq&m=112870589127719&w=2
- http://secunia.com/advisories/15991/
- http://securityreason.com/securityalert/64
- http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
- http://www.osvdb.org/20056
- http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html
- http://www.securityfocus.com/bid/15032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22544