CVE-2005-3206

MEDIUM 5.0CVE-2005-3206 · Published 14/10/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
database server oracle	`= 9.0.2.4`	No fix yet

Description

iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command.

References

archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html · Exploit
marc.info
secunia.com/advisories/15991 · Patch
securityreason.com/securityalert/64
oracle.com/technology/deploy/security/pdf/cpujul2005.html · Patch
osvdb.org/20056
red-database-security.com/advisory/oracle_isqlplus_shutdown.html · Exploit
securityfocus.com/bid/15032 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/22544

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free