CVE-2002-0965

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.html
http://online.securityfocus.com/archive/1/276526
http://otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdfPatch, Vendor Advisory
http://www.iss.net/security_center/static/9288.php
http://www.kb.cert.org/vuls/id/630091US Government Resource
http://www.securityfocus.com/bid/4845Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.html
http://online.securityfocus.com/archive/1/276526
http://otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdfPatch, Vendor Advisory
http://www.iss.net/security_center/static/9288.php
http://www.kb.cert.org/vuls/id/630091US Government Resource
http://www.securityfocus.com/bid/4845Patch, Vendor Advisory

Timeline

Published: Oct 4, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-09667.5Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HT CVE-2002-09677.5Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbit CVE-2002-09687.5Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code v CVE-2002-09697.8Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbi CVE-2002-09707.5The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, w CVE-2002-09714.6Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging Syste CVE-2002-09724.6Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to th CVE-2002-09734.6Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel me CVE-2002-09745.0Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses upldd CVE-2002-09757.5Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitra CVE-2002-09766.4Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet CVE-2002-09777.5Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a