Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle extproc目录遍历漏洞
Vulnerability Description
Oracle Database是一款商业性质大型数据库系统。 Oracle 10g extproc存在目录遍历问题，远程攻击者可以利用这个漏洞绕过目录限制，访问其他库。 extproc验证'$ORACLE_HOME\bin'目录中的库，这主要是为了保证外部库不能被装载，但是存在一个目录遍历问题，可导致攻击者绕过目录限制，访问如libc和msvcrt.dll库，通过调用system()函数可执行任意OS命令。
CVSS Information
N/A
Vulnerability Type
N/A