Here's the page we think you wanted. See search results instead:

Oracle OPMN Service Log Format String

Strike ID:
E07-4ah01
CVSS:
10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2007

Description

This strike exploits a format string vulnerability Oracle Application Server's Oracle Process Manager and Notification's logging function. An attacker may send a format string to OPMN service, causing the component to either crash or execute malicious code.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-5561

References

http://www.irmplc.com/index.php/142-Advisory-021

Bid