Description
Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.
Remediation
References
Related Vulnerabilities
WordPress Plugin Answer My Question SQL Injection (1.3)
Ruby Integer Overflow or Wraparound Vulnerability (CVE-2008-2663)
WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Request Forgery (4.11.3.3)
WebLogic CVE-2020-14589 Vulnerability (CVE-2020-14589)
OpenSSL Missing Encryption of Sensitive Data Vulnerability (CVE-2019-1547)