CVE-2002-1118 : TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i

TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.

Published 2002-10-28 05:00:00

Updated 2008-09-11 00:03:01

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2002-1118

Oracle » Oracle8i » Version: 8.1.5
cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.6
cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.7
cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.7.1
cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.7.0.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.7.0.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.7.1.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.7.1.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.5.0.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.5.0.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.5.0.2 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.5.0.2_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.6.1.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.6.1.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.5.1.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.5.1.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle8i » Version: 8.1.6.0.0 Enterprise
cpe:2.3:a:oracle:oracle8i:8.1.6.0.0_enterprise:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: 9.0
cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: 9.0.1
cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: 9.0.1.2
cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: 9.0.2
cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: Release 2 9.2.1
cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: Release 2 9.2.2
cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*
Matching versions
Oracle » Oracle9i » Version: 9.0.1 3
cpe:2.3:a:oracle:oracle9i:9.0.1_3:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2002-1118

EPSS FAQ

10.70%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1118

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2002-1118

http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf

Patch;Vendor Advisory
http://www.iss.net/security_center/static/10283.php

Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html

Exploit;Patch;Vendor Advisory
http://www.securityfocus.com/bid/5678

Jump to

Vulnerability Details : CVE-2002-1118

Products affected by CVE-2002-1118

Exploit prediction scoring system (EPSS) score for CVE-2002-1118

CVSS scores for CVE-2002-1118

References for CVE-2002-1118