<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2002-0857" target="_blank">CVE</a>)</em> : Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Workaround:
In addition to available patches, Oracle strongly urges customers to take the following steps to address the vulnerabilities identified above.
1. Configure listener password to prevent unauthorized users from administering the listener.
Alternatively, set ADMIN_RESTRICTIONS_listener_name=ON in listener.ora to completely disable the runtime modification of listener’s configuration parameters.
2. Set appropriate Operating System directory and file permissions on the Listener configuration file, listener.ora.
For example:
Unix: $ chmod 600 $ORACLE_HOME/network/admin/listener.ora
Windows: File properties > Security > Permissions …
3. Do not attempt to start an Oracle Net Listener with an invalid name.

Patch Information
Oracle has fixed the potential vulnerabilities identified above under the base bug number 2395416. Download currently available patches from Oracle Worldwide Support Services web site, Metalink (http://metalink.oracle.com). Activate the ‘Patches’ button to get to the patches Web page. Enter bug Number 2395416 as indicated above and activate the ‘Submit’ button.

• CVE ID: 2002-0857 (see also: NVD)
• CERT VU: 301059
• Related OSVDB ID: 44552
• Bugtraq ID: 5460
• ISS X-Force ID: 9832
• Mail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=102933735716634&w=2
• Vendor Specific Advisory URL: http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf
  http://www.oracle.com/technology/deploy/security/pdf/2002alert40rev3.pdf
• Other Advisory URL: http://www.nextgenss.com/advisories/ora-lsnrfmtstr.txt
• Keyword: Listener Control utility

Unknown or Incomplete