CVE-2005-3207

Published: Oct 14, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.

Affected (6)

Products: Oracle: Forms

Oracle

1 product

Forms

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Forms	Version 10g
Oracle Forms	Version 4.5.10.22
Oracle Forms	Version 5.0
Oracle Forms	Version 6.0.8.25
Oracle Forms	Version 6i
Oracle Forms	Version 9i

References (16)

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=112870645720399&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15991/

Source: cve@mitre.org

http://securityreason.com/securityalert/65

Source: cve@mitre.org

http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html

Source: cve@mitre.org

Patch

http://www.red-database-security.com/advisory/oracle_forms_shutdown.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/15039

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/22543

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html