PT-2001-1720 · Oracle · Oracle Listener

Published 2001-07-21 · Updated 2017-10-10 · CVE-2001-0513

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Oracle listener (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port. This occurs because the Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-0513

Affected Products

Oracle Listener

References · 5

• http://xforce.iss.net/alerts/advise81.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0513 · Security Note
• http://osvdb.org/5600 · Note
• http://kb.cert.org/vuls/id/105259 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6717 · Note