CVE-2001-0499
Oracle8i < 8.1.7 - Remote Buffer Overflow via TNS Listener Commands
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2001-0499.
PoCs published by Metasploit, benjurry, MC, including Metasploit module exploits/windows/oracle/tns_arguments.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Oracle 8i TNS Listener via a crafted ARGUMENTS string. It targets Windows 2000/2003 with Oracle 8.1.7.0.0, delivering a payload for remote code execution.
Description
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Oracle 8i TNS Listener via a crafted ARGUMENTS string. It targets Windows 2000/2003 with Oracle 8.1.7.0.0, delivering a payload for remote code execution.
This exploit targets a buffer overflow in Oracle 8i TNS Listener (CVE-2001-0499) to achieve remote code execution. It crafts a malicious packet to overwrite the SEH and execute a bind shell on port 8080.
This Metasploit module exploits a stack buffer overflow in Oracle 8i TNS Listener via a crafted packet with an overly long ARGUMENTS string, leading to arbitrary code execution. It includes payload handling, bad character avoidance, and target-specific offsets for Windows 2000/2003.