DB: Oracle TNS Listener Infinite Loop Denial of Service

This signature detects attempts to exploit a known vulnerability against Oracle TNS listener. A successful attack can result in a denial-of-service condition.

Extended Description

Oracle Database is prone to a remote vulnerability affecting the 'Listener' component. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this vulnerability. The attacker can exploit this issue to crash the affected application, denying service to legitimate users. The following are vulnerable: Oracle9i 9.2.0.8 and 9.2.0.8DV Oracle10g 10.1.0.5 and 10.2.0.4 Oracle11g 11.1.0.7 Other versions may also be affected.

Affected Products

Oracle oracle10g_personal_edition

References

BugTraq: 35683

CVE: CVE-2009-1970

Short Name
DB:ORACLE:TNS:LOOP-DOS
Severity
Major
Recommended
False
Recommended Action
None
Category
DB
Keywords
CVE-2009-1970 Denial Infinite Listener Loop Oracle Service TNS bid:35683 of
Release Date
09/10/2009
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown
Vendors

Oracle

CVSS Score

5.0

Found a potential security threat?