CVE-2000-0818

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-12-19 · updated 2026-09-23

Description

The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.

Affected products

Oracle Listener: 7.3.4, 8.0.6, 8.1.6

References

http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf
http://xforce.iss.net/alerts/advise66.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/5380
http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf
http://xforce.iss.net/alerts/advise66.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/5380

Get alerted when CVE-2000-0818 or the next vulnerability affects your stack