CVE-2002-0567: High severity Oracle Database Server vulnerability
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0567?
CVE-2002-0567 is considered to be a critical vulnerability due to its potential for remote exploitation and arbitrary function execution.
How do I fix CVE-2002-0567?
To mitigate CVE-2002-0567, it is recommended to disable the External Procedures support in Oracle or apply vendor patches if available.
Who is affected by CVE-2002-0567?
CVE-2002-0567 affects Oracle 8i and 9i databases that have the PL/SQL package for External Procedures enabled.
What type of attack does CVE-2002-0567 allow?
CVE-2002-0567 allows remote attackers to bypass authentication and execute arbitrary functions via the TNS Listener.
When was CVE-2002-0567 reported?
CVE-2002-0567 was reported in 2002 and has been identified as a significant threat to Oracle database systems.