BID:5457

Oracle Listener Malformed Debugging Command Denial Of Service Vulnerability

Info

Oracle Listener Malformed Debugging Command Denial Of Service Vulnerability

Bugtraq ID:	5457
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 13 2002 12:00AM
Updated:	Aug 13 2002 12:00AM
Credit:	Discovered by X-Force of Internet Security Systems <[email protected]>.
Vulnerable:	Oracle Oracle9i Standard Edition 9.2 .0.1 Oracle Oracle9i Standard Edition 9.0.2 Oracle Oracle9i Standard Edition 9.0.1 .3 Oracle Oracle9i Standard Edition 9.0.1 .2 Oracle Oracle9i Standard Edition 9.0.1 Oracle Oracle9i Standard Edition 9.0 Oracle Oracle8i Standard Edition 8.1.7 .1 Oracle Oracle8i Standard Edition 8.1.7 Oracle Oracle8i Standard Edition 8.1.6 Oracle Oracle8i Standard Edition 8.1.5 Oracle Oracle8i Enterprise Edition 8.1.7 .1.0 Oracle Oracle8i Enterprise Edition 8.1.7 .0.0 Oracle Oracle8i Enterprise Edition 8.1.6 .1.0 Oracle Oracle8i Enterprise Edition 8.1.6 .0.0 Oracle Oracle8i Enterprise Edition 8.1.5 .1.0 Oracle Oracle8i Enterprise Edition 8.1.5 .0.2 Oracle Oracle8i Enterprise Edition 8.1.5 .0.0

Not Vulnerable:

Discussion

Oracle Listener Malformed Debugging Command Denial Of Service Vulnerability

The Oracle Listener includes support for a number of debugging commands. These may be used by a remote administrator to retrieve information about the database.

The Oracle Listener process may crash when processing a malformed debugging request. A remote attacker may exploit this vulnerability to create a denial of service condition.

It has been reported that the debugging features in question are enabled by default, and may not be disabled through configuration.

Exploit / POC

Oracle Listener Malformed Debugging Command Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Oracle Listener Malformed Debugging Command Denial Of Service Vulnerability

Solution:
Oracle suggests that access to the Listener process be restricted to a minimal number of systems through usage of the 'Valid Node Checking' feature.

Oracle reports that this issue will be resolved in Oracle 9i 9.0.1.4 and Oracle 9i Release 2 9.2.0.2. Release dates for these versions are not currently known.

A patch is available. Oracle customers are advised to reference Bug Number 2467947 on Oracle Metalink:

http://metalink.oracle.com

Oracle Oracle8i Enterprise Edition 8.1.5 .0.2