Lucene search

K
nvd[email protected]NVD:CVE-2002-0965
HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-0965

2002-10-0404:00:00
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.95 High

EPSS

Percentile

99.3%

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.

Affected configurations

NVD
Node
oracleoracle9iMatch9.0
OR
oracleoracle9iMatch9.0.1
OR
oracleoracle9iMatch9.0.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.95 High

EPSS

Percentile

99.3%