CVE-2002-0856: Medium severity Oracle Oracle9i vulnerability
Published Sep 5, 2002
·Updated
SQLNET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.
Affected Software
6 affected components
Oracle Oracle9i=9.0.1
Oracle Oracle9i=9.0.2
Oracle Oracle9i=9.0
Oracle Database Server=9.2.1
Oracle Oracle9i=9.0.1.3
Oracle Oracle9i=9.0.1.2
Remediation
Patch Available
Event History
Sep 5, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0856?
CVE-2002-0856 has a severity rating that is high due to its potential to cause a denial of service.
2
How do I fix CVE-2002-0856?
To fix CVE-2002-0856, apply the latest security patches provided by Oracle for the affected versions.
3
What versions are affected by CVE-2002-0856?
CVE-2002-0856 affects Oracle9i versions 9.0 through 9.2.1.
4
Can CVE-2002-0856 be exploited remotely?
Yes, CVE-2002-0856 can be exploited remotely by attackers using certain debug requests.
5
What impact does CVE-2002-0856 have on Oracle systems?
CVE-2002-0856 can cause a crash of the SQL*NET listener, resulting in a denial of service.