CVE-2006-0547

CVE-2006-0547 affects Oracle Database 8i, 9i, and 10g. The issue arises in the authentication phase of the Transparent Network Substrate (TNS) protocol where a modified AUTH_ALTER_SESSION attribute can be exploited by remote authenticated users to execute arbitrary SQL statements in the context o...

CVE-2006-0547

Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTHALTERSESSION attribute in the authentication phase of t...

CVE-2006-0547: Undefined Security Weakness

Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTHALTERSESSION attribute in the authentication phase of t...

Oracle TNS protocol fails to properly validate authentication requests

Overview The Oracle TNS protocol authentication mechanism fails to properly sanitize authentication requests, possibly allowing a remote attacker to execute arbitrary SQL statements with elevated privileges. Description Oracle databases authenticate and manage database connections via Oracle...

[Full-disclosure] Oracle DBMS - Access Control Bypass in Login

Oracle DBMS – Access Control Bypass in Login Background Oracle is a widely deployed DBMS. Clients use a protocol called TNS to communicate to the Oracle server. Protocol messages are used for session setup, authentication and data transfer. The standard authentication mechanism requires a client ...

Oracle Database Detection (TNS service)

TNS service based detection of an Oracle Database Server SPDX-FileCopyrightText: 2005 James W. Abendschan Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-3206

iSQLPlus isqlplus for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service TNS listener stop via an HTTP request with an sid parameter that contains a STOP command...

CVE-2005-3207

The forms servlet f90servlet in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service TNS listener stop via a userid parameter that contains a STOP command...

CVE-2005-3206

iSQLPlus isqlplus for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service TNS listener stop via an HTTP request with an sid parameter that contains a STOP command...

CVE-2005-3207: Undefined Security Weakness

The forms servlet f90servlet in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service TNS listener stop via a userid parameter that contains a STOP command...

Oracle 9.0 iSQL*Plus - TLS Listener Remote Denial of Service

Oracle 9.0 iSQLPlus - TLS Listener Remote Denial of Service source: https://www.securityfocus.com/bid/15032/info Oracle iSQLPLUS is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a...

[Full-disclosure] Shutdown TNS Listener via Oracle iSQL*Plus

Shutdown TNS Listener via Oracle iSQLPlus Name Shutdown TNS Listener via Oracle iSQLPlus Systems Affected Oracle Database 9i Rel. 2 Severity Medium Risk Category Denial of Service Vendor URL http://www.oracle.com This advisory http://www.red-database-security.com/advisory/oracleisqlplusshutdown.h...

Oracle Forms - Servlet TLS Listener Remote Denial of Service

Oracle Forms - Servlet TLS Listener Remote Denial of Service source: https://www.securityfocus.com/bid/15039/info Oracle Forms is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a specif...

Oracle Forms - Servlet TLS Listener Remote Denial of Service

source: https://www.securityfocus.com/bid/15039/info Oracle Forms is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a specific HTTP request, remote attackers may cause the affected...

CVE-2003-1116: Undefined Security Weakness

The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...

CVE-2004-1369

CVE-2004-1369 concerns the TNS Listener in Oracle 10g. The vulnerability allows remote attackers to cause a denial of service (listener crash) by sending a malformed service_register_NSGR request, where a value is used as an invalid offset for a pointer that references incorrect memory. The prima...

CVE-2004-1369

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

CVE-2004-1369: Undefined Security Weakness

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...

Immunity Canvas: AWSERVICES

Name| awservices ---|--- CVE| CVE-2004-1812 Exploit Pack| CANVAS Description| awservices.exe Notes| References: http://marc.info/?l=bugtraq&m=107936784030214&w=2 CVE Name: CVE-2004-1812 VENDOR: Computer Associates Notes: Remote exploit against awservices.exe - part of TNS 2.4 according to...

Oracle TNS Listener DoS (#NISR2122004F)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g TNS Listener DoS Systems Affected: Oracle 10g on all operating systems Severity: High risk on high availability systems else low Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...