Oracle Database TNS Listener Service Registration Authentication Weakness (CVE-2012-1675)

An authentication weakness vulnerability has been reported in Oracle Database's TNS listener component...

CVE-2012-1675

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by...

Design/Logic Flaw

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by...

CVE-2012-1675

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by...

CVE-2012-1675

CVE-2012-1675 refers to a TNS Listener poisoning vulnerability in Oracle Database components (notably 10g/11g) where remote registration of an existing instance or service name followed by a MITM can hijack connections and allow arbitrary commands. Affected are Oracle Database 11g R1/R2 and 10g d...

CVE-2012-1675: Undefined Security Weakness

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by...

Oracle Database new zero day exploit put users at risk

Oracle Database new zero day exploit put users at risk Oracle has recommended workarounds for a zero-day Oracle Database flaw that was not fixed in the company's April critical patch update. Oracle issued a security alert for Oracle TNS Poison, the vulnerability, disclosed by researcher Joxean...

Oracle TNS Poison vulnerability is actually a 0day with no patch available

Hi all, Short history: The remote pre-authenticated vulnerability with CVSS2 10 I published some days ago 1, the vulnerability I called Oracle TNS Poison reported to vendor in 2008, is a 0day affecting all database versions from 8i to 11g R2. There is no patch at all for this vulnerability and...

Re: The history of a -probably- 13 years old Oracle bug: TNS Poison

I wanted to comment on the workarounds for this problem: 1 Setting SQLNET.ENCRYPTIONSERVER=REQUIRED on the server is not enough to protect you. To avoid "man in the middle" attacks, you need to have an SSL certificate on the server and SSLSERVERDNMATCH=TRUE in the client's sqlnet.ora. 2 Another w...

Oracle database TNS listener vulnerability

Overview The Oracle database component contains a vulnerability in the TNS listener service that may be exploited to sniff database traffic and run arbitrary database commands. Description The Oracle database component contains a vulnerability in the TNS listener service that has been referred to...

Critical Bug Reported in Oracle Servers

There’s a critical remotely exploitable vulnerability in all of the current versions of the Oracle database server that can enable an attacker to intercept traffic and execute arbitrary commands on the server. The bug, which Oracle reported as fixed in the most recent Critical Patch Update, is on...

The history of a -probably- 13 years old Oracle bug: TNS Poison

tl;dr - Patch your database ASAP with Oracle Critical Patch Update April 2012. Introduction ------------ The following advisory explains a vulnerability I found in 2008 in all versions of Oracle Database server until very recently. The bug is probably available in any Oracle Database version sinc...

Oracle TNS Listener Checker

This module checks the server for vulnerabilities like TNS Poison. Module sends a server a packet with command to register new TNS Listener and checks for a response indicating an error. If the registration is errored, the target is not vulnerable. Otherwise, the target is vulnerable to malicious...

Nmap NSE net: oracle-sid-brute

Guesses Oracle instance/SID names against the TNS-listener. If the 'oraclesids' script argument is not used to specify an alternate file, the default 'oracle-sids' file will be used. License to use the 'oracle-sids' file was granted by its author, Alexander Kornbrust...

Oracle TNS Listener SID Bruteforce

This module queries the TNS listener for a valid Oracle database instance name also known as a SID. Any response other than a "reject" will be considered a success. If a specific SID is provided, that SID will be attempted. Otherwise, SIDs read from the named file will be attempted in sequence...

Nmap NSE: Oracle SID Brute

This script attempts to guess Oracle instance/SID names against the TNS-listener. This is a wrapper on the Nmap Security Scanner's http://nmap.org oracle-sid-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaporaclesidbrute.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for Nmap Oracle SID Brute N...

Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)

$Id: tnsarguments.rb 11122 2010-11-24 06:10:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Oracle 10gR2 - TNS Listener AUTH_SESSKEY Buffer Overflow (Metasploit)

$Id: tnsauthsesskey.rb 11128 2010-11-24 19:43:49Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Oracle 8i - TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)

$Id: tnsservicename.rb 11128 2010-11-24 19:43:49Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Oracle Database DBMS TNS Listener Denial of Service (CVE-2009-0991)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...