CVE-2002-1767: Buffer Overflow

Published Dec 31, 2002

Updated

Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.

Affected Software

1 affected component

Oracle Database Server=8.1.5

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1767?

CVE-2002-1767 is considered critical due to its ability to enable local users to execute arbitrary code.

How do I fix CVE-2002-1767?

Fixing CVE-2002-1767 involves upgrading to a patched version of Oracle Database Server that addresses the buffer overflow vulnerability.

Who is affected by CVE-2002-1767?

CVE-2002-1767 affects local users of Oracle Database Server version 8.1.5 on Linux systems.

What kind of attack does CVE-2002-1767 allow?

CVE-2002-1767 allows local users to exploit a buffer overflow to execute arbitrary commands with the privileges of the oracle user.

Is CVE-2002-1767 still a threat today?

While CVE-2002-1767 pertains to an older version of Oracle, legacy systems still using Oracle Database Server 8.1.5 may remain vulnerable if not updated.