CVE-2002-0965: oracle oracle9i

EPSS trend

Probability

69.81%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 69.81% on 21-09-2026

21-09-202621-10-2026

EPSS score

69.81%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotewindowsVerified
Oracle 8i - TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Oracle 8i TNS Listener SERVICE_NAME Buffer Overflow
exploit/windows/oracle/tns_service_name
Maturity: weaponized

References

6 links

www.kb.cert.org/vuls/id/630091Third Party AdvisoryX Refsource CERT VNUS Government Resource
otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdfX Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/4845VDB EntryX Refsource BIDPatchVendor Advisory
online.securityfocus.com/archive/1/276526Mailing ListX Refsource BUGTRAQ
www.iss.net/security_center/static/9288.phpVDB EntryX Refsource XF
archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.htmlMailing ListX Refsource VULNWATCH

Related vulnerabilities

CVE-2003-0894oracleoracle9i0.89%23y ago25-10-2003 04:00Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.CVE-2005-1495oracleapplication_server+23.21%21y ago11-05-2005 04:00Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.CVE-2005-3641oracledatabase_server+44.70%20y ago16-11-2005 21:17Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.CVE-2005-3204oracleapplication_server+120.69%21y ago14-10-2005 04:00Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request.CVE-2004-2244oracleapplication_server+12.63%21y ago17-07-2005 04:00The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote attackers to cause a denial of service (CPU and memory consumption) via a SOAP message containing a crafted DTD.CVE-2004-1370oracleapplication_server+83.86%21y ago19-01-2005 05:00Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.

All vulnerabilities inoracle9i

CVE-2002-0965: oracle oracle9i

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References