CVE-2002-0965

Oracle 9i - Buffer Overflow via Long SERVICE_NAME Parameter

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2002-0965. PoCs published by Metasploit, MC, including Metasploit module exploits/windows/oracle/tns_service_name.

AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Oracle 8i TNS Listener via a long SERVICE_NAME parameter. It targets Windows 2000/2003 systems running Oracle 8.1.7.0.0, delivering a payload for remote code execution.

Description

Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16341

View Code ZIP pw:eip

This is a Metasploit module exploiting a stack buffer overflow in Oracle 8i TNS Listener via a long SERVICE_NAME parameter. It targets Windows 2000/2003 systems running Oracle 8.1.7.0.0, delivering a payload for remote code execution.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Oracle 8i TNS Listener 8.1.7.0.0

No auth needed

Prerequisites: Network access to TNS Listener (port 1521) · Target running vulnerable Oracle version

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC GOOD

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/oracle/tns_service_name.rb