Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-0071 — Oracle Database Server vulnerability

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
12.5%
top 6.05%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Oracle Database Server
Timeline
PublishedJan 13
Latest updateMay 2

Description

Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDoracle/database_server5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-8f72-282j-f5f8: Unspecified vulnerability in the Listener component in Oracle Database 9↗2022-05-02
▶
CVEList
CVE-2010-0071: Unspecified vulnerability in the Listener component in Oracle Database 9↗2010-01-13
▶

💥Exploits & PoCs

1
Exploit-DB
Oracle Database - Remote Listener Memory Corruption↗2010-01-12
▶
CVE-2010-0071 — Oracle Database Server vulnerability | cvebase