The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_server | Oracle | 9.0.4.3 (including) | 9.0.4.3 (including) |
| Application_server | Oracle | 10.1.2.0.2 (including) | 10.1.2.0.2 (including) |
| Application_server | Oracle | 10.1.2.2 (including) | 10.1.2.2 (including) |