Oracle 9i TNS Denial of Service Vulnerability
BID:4391
Info
Oracle 9i TNS Denial of Service Vulnerability
| Bugtraq ID: | 4391 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-0509 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 28 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | Reported by Andrey Gordienko <[email protected]>. |
| Vulnerable: |
Oracle Oracle9i Standard Edition 9.0.1 Oracle Oracle9i Standard Edition 9.0 |
| Not Vulnerable: | |
Discussion
Oracle 9i TNS Denial of Service Vulnerability
Oracle is a commercial relational database product. Oracle is available for the Unix, Linux, and Microsoft Windows platforms.
Reportedly, sending a one byte packet to the TNS Listener on port 1521 could cause the host to consume all available CPU, potentially leading to a denial of service.
This issue may stem from an originally discovered issue in Oracle Net8 (formerly Oracle SQL*Net). However this has not yet been confirmed.
Oracle is a commercial relational database product. Oracle is available for the Unix, Linux, and Microsoft Windows platforms.
Reportedly, sending a one byte packet to the TNS Listener on port 1521 could cause the host to consume all available CPU, potentially leading to a denial of service.
This issue may stem from an originally discovered issue in Oracle Net8 (formerly Oracle SQL*Net). However this has not yet been confirmed.
Exploit / POC
Oracle 9i TNS Denial of Service Vulnerability
No exploit code required.
No exploit code required.
Solution / Fix
Oracle 9i TNS Denial of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Oracle 9i TNS Denial of Service Vulnerability
References:
References: