Description

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.

Remediation

References

CVE-2007-2120

Related Vulnerabilities

WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.9)

IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753)

Moodle CVE-2024-25981 Vulnerability (CVE-2024-25981)

AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755)

WordPress Plugin Shipping Servientrega Woocommerce Arbitrary File Upload (2.0.3)

Severity

High

Classification

CVE-2007-2120

Tags

Missing Update Known Vulnerabilities