VulnerabilityModified

CVE-2004-1369

The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.

MEDIUM 5.0EPSS 5.64%

Does this matter?

Lower severity and a low EPSS score (5.64%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 5.64% probability · 93th percentile
CISA KEV: Not listed
Affected: oracle/application server · oracle/collaboration suite · oracle/e-business suite · oracle/enterprise manager · oracle/enterprise manager database control · oracle/enterprise manager grid control · oracle/oracle10g · oracle/oracle8i · oracle/oracle9i
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=110382524401468&w=2
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
http://www.kb.cert.org/vuls/id/316206US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004F.txtPatch, Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfPatch, Vendor Advisory
http://www.securityfocus.com/bid/10871Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.htmlPatch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18664
http://marc.info/?l=bugtraq&m=110382524401468&w=2
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
http://www.kb.cert.org/vuls/id/316206US Government Resource
http://www.ngssoftware.com/advisories/oracle23122004F.txtPatch, Vendor Advisory
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfPatch, Vendor Advisory
http://www.securityfocus.com/bid/10871Patch
http://www.us-cert.gov/cas/techalerts/TA04-245A.htmlPatch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/18664

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.