Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote malicious users to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
oracle oracle8i 8.1 |
||
oracle database server 7.3.4 |
||
oracle database server 9.0 |
||
oracle database server 9.2 |