Oracle 8i SQLNet Denial of Service Vulnerability

Bugtraq ID:	2940
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-0517 CVE-2001-0518 CVE-2001-0515 CVE-2001-0516 CVE-2001-0498
Remote:	Yes
Local:	No
Published:	Jun 27 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	Reported to Bugtraq by Nishad Herath of COVERT Labs at PGP Security and posted in a Internet Security Systems Security Advisory.
Vulnerable:	Oracle Oracle8 8.1.7 - Microsoft Windows 2000 Professional Oracle Oracle8 8.1.6 Oracle Oracle8 8.1.5 + HP HP-UX 11.11 + HP HP-UX 11.0 + Redhat Linux 6.2 i386 + Redhat Linux 6.1 i386
Not Vulnerable:

Oracle 8i SQLNet Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Oracle 8i SQLNet Denial of Service Vulnerability

Solution:
* It has been reported that the patch is still unavailable. Forthcoming updates will provide additional information when it becomes available. Until fixes are obtainable, administrators should block network access to the listener.

A fix is reportedly being developed.

It will be available at the Oracle MetaLink support website.

http://metalink.oracle.com

Oracle 8i SQLNet Denial of Service Vulnerability

References:

• Oracle Support Metalink (Oracle)
  
• Oracle Support Page (Oracle)