CVE-2002-0857

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Scoring

CVSS base score
0.14
EPSS probability
2.78%
Published
2002-08-20
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs