CVE-2000-0818

Published: Dec 19, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.

Affected (3)

Products: Oracle: Listener

Oracle

1 product

Listener

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Listener	Version 7.3.4
Oracle Listener	Version 8.0.6
Oracle Listener	Version 8.1.6

References (6)

http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf

Source: cve@mitre.org

PatchVendor Advisory

http://xforce.iss.net/alerts/advise66.php

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5380

Source: cve@mitre.org

http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://xforce.iss.net/alerts/advise66.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5380

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.