VULNERABILITY INTELLIGENCE

CVE-2002-0857

CVSS score7.5 HIGH
EPSS probability13.79%
CISA KEVNot currently listed
Published2002-09-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Primary references