Description
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
References
- http://www.ngssoftware.com/advisories/oracle23122004F.txt
- oracle-tnslsnr-nsgr-dos(18664) vdb-entry
- 20041223 Oracle TNS Listener DoS (#NISR2122004F) mailing-list
- VU#316206 third-party-advisory
- TA04-245A third-party-advisory
- 10871 vdb-entry
- http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
- 101782 vendor-advisory