# CVE-2002-0857

## Summary

- **CVE ID:** CVE-2002-0857
- **Severity:** UNKNOWN
- **CVSS Score:** 0.14
- **CWE:** N/A
- **Published:** Aug 20, 2002
- **Last Modified:** Mar 16, 2026

## Description

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf)
- [CNA](http://www.kb.cert.org/vuls/id/301059)
- [CNA](http://securitytracker.com/id?1005037)
- [CNA](http://www.securityfocus.com/bid/5460)
- [CNA](http://marc.info/?l=bugtraq&m=102933735716634&w=2)
- [CNA](http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 2.78%
- **EPSS Percentile:** 85.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._