CVE-2002-0857: Oracle Database Server

High severity, CVSS 7.5. EPSS: 13.8% chance of exploitation in the next 30 days.

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Affected products

• Oracle Database Server: version 7.3.4 only; version 9.0 only; version 9.2 only
• Oracle ORACLE8I: version 8.1 only

Published 2002-09-05. Last modified 2026-06-16.