Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
DB:ORACLE:TNS:LOOP-DOS |
|---|---|
Severity |
Major |
Recommended |
No |
Category |
DB |
Keywords |
Oracle TNS Listener Infinite Loop Denial of Service |
Release Date |
2009/09/10 |
Update Number |
1504 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DB: Oracle TNS Listener Infinite Loop Denial of Service
This signature detects attempts to exploit a known vulnerability against Oracle TNS listener. A successful attack can result in a denial-of-service condition.
Extended Description
Oracle Database is prone to a remote vulnerability affecting the 'Listener' component. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this vulnerability. The attacker can exploit this issue to crash the affected application, denying service to legitimate users. The following are vulnerable: Oracle9i 9.2.0.8 and 9.2.0.8DV Oracle10g 10.1.0.5 and 10.2.0.4 Oracle11g 11.1.0.7 Other versions may also be affected.
Affected Products
- Oracle oracle10g_enterprise_edition 10.1.0 .5
- Oracle oracle10g_enterprise_edition 10.2.0.4
- Oracle oracle10g_personal_edition 10.1.0.5
- Oracle oracle10g_personal_edition 10.2.0.4
- Oracle oracle10g_standard_edition 10.1.0 .5
- Oracle oracle10g_standard_edition 10.2.0.4
- Oracle oracle11g_enterprise_edition 11.1.0.7
- Oracle oracle11g_standard_edition 11.1.0.7
- Oracle oracle9i_enterprise_edition 9.2.0 .8DV
- Oracle oracle9i_personal_edition 9.2.0 .8DV
- Oracle oracle9i_standard_edition 9.2.0.8
- Oracle oracle9i_standard_edition 9.2.0 .8DV
References
- BugTraq: 35683
- CVE: CVE-2009-1970