CVE-2002-0965: Buffer Overflow
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICENAME parameter, which is not properly handled when writing an error message to a log file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0965?
CVE-2002-0965 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2002-0965?
To fix CVE-2002-0965, upgrade to a patched version of Oracle 9i Database Server or implement appropriate access controls.
Who is affected by CVE-2002-0965?
CVE-2002-0965 affects local users of Oracle 9i Database Server on Windows systems and Oracle 8 on VM.
What types of attacks can exploit CVE-2002-0965?
CVE-2002-0965 can be exploited by local users to execute arbitrary code by providing a long SERVICE_NAME parameter.
What versions of Oracle are vulnerable to CVE-2002-0965?
Vulnerable versions to CVE-2002-0965 include Oracle 9i versions 9.0.1, 9.0.2, and 9.0.