Oracle TNS Listener Denial Of Service

TNS Listener Oracle RDBMS exploit, cause Listener process crash While running on 11.1.0.7.0 win32, nsglvcrt Listener function attempt to allocate huge memory block and copy something to it. TID=3052|1 MSVCR71.dll!malloc 0x4222fc5 called from 0x438631 TNSLSNR.EXE!nsglvcrt+0x95 TID=3052|1...

CVE-2009-3410

Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3410

CVE-2009-3410 is an unspecified vulnerability in the Oracle Database RDBMS component affecting Oracle Database 11.1.0.7, 10.2.0.3/4, 10.1.0.5, 9.2.0.8 and 9.2.0.8DV. It allows remote authenticated users to affect confidentiality and integrity via unknown vectors. CVSS v2 base score: 3.6 (Low). Th...

CVE-2009-3410

Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3410: Undefined Security Weakness

Unspecified vulnerability in the RDBMS component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Oracle Database Core RDBMS Component Denial of Service (CVE-2007-5530)

Oracle Database is an enterprise-level relational database suite. Oracle Database contains many components that enable users and administrators to access it for various tasks, such as database manipulation, or administration of the numerous Oracle services. There exists a denial of service...

CVE-2009-1979 (Oracle RDBMS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi. This vulnerability was ranked 10.0 for Windows in CPUoct2009 and related to improper AUTHSESSKEY parameter length validation. http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html Executable + source code attached...

Design/Logic Flaw

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2009-1992

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2009-1992: Undefined Security Weakness

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Oracle Mega-Patch Coming Next Tuesday

Oracle has announced plans to ship a Critical Patch Update CPU with fixes for at least 38 security vulnerabilities in a wide range of database and server products. The most serious vulnerabilities affect Oracle Core RDBMS, Oracle JRockit and Oracle Network Authentication. Read the Oracle advance...

Design/Logic Flaw

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-1015

CVE-2009-1015 is an unspecified vulnerability in Oracle Database Core RDBMS affecting 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4. The vulnerability allows remote authenticated users to affect integrity via unknown vectors. Oracle’s July 2009 CPU addresses this and other fixes; affected products/v...

CVE-2009-1015

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2009-1015: Undefined Security Weakness

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors...

Oracle RDBMS TNS Listener Proof Of Concept

TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with latest CPU patches applied Vulnerability...

Oracle RDBms 10.2.0.311.1.0.6 - TNS Listener (PoC)

Oracle RDBms 10.2.0.311.1.0.6 - TNS Listener PoC TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32...

Oracle RDBMS 10.2.0.3/11.1.0.6 TNS Listener PoC (CVE-2009-0991)

No description provided by source. TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with lates...

Oracle RDBms 10.2.0.3/11.1.0.6 - TNS Listener (PoC)

TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with latest CPU patches applied Vulnerability...