CVE-2001-0499

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cert.org/advisories/CA-2001-16.htmlUS Government Resource
http://www.kb.cert.org/vuls/id/620495US Government Resource
http://www.nai.com/research/covert/advisories/050.asp
http://www.securityfocus.com/bid/2941
https://exchange.xforce.ibmcloud.com/vulnerabilities/6758
http://www.cert.org/advisories/CA-2001-16.htmlUS Government Resource
http://www.kb.cert.org/vuls/id/620495US Government Resource
http://www.nai.com/research/covert/advisories/050.asp
http://www.securityfocus.com/bid/2941
https://exchange.xforce.ibmcloud.com/vulnerabilities/6758

Timeline

Published: Jul 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-050010.0Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attacke CVE-2001-05014.6Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manne CVE-2001-05024.6Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal CVE-2001-05035.0Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to CVE-2001-05047.5Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to g CVE-2001-05055.0Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large CVE-2001-05067.2Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for CVE-2001-05077.2IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse fi CVE-2001-05085.0Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.CVE-2001-05095.0Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT CVE-2001-05135.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, wh CVE-2001-05147.5SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community s