CVE-2012-1675

The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite, and possibly other products, allows remote attackers to execute arbitrary database commands by performing a remote registration of a database (1) instance or (2) service name that already exists, then conducting a man-in-the-middle (MITM) attack to hijack database connections, aka "TNS Poison."

• CWE-264

• http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00018.htmlMailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/204Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/343Mailing List, Third Party Advisory
• http://www.kb.cert.org/vuls/id/359816Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.htmlVendor Advisory
• http://www.securityfocus.com/bid/53308Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027000Third Party Advisory, VDB Entry
• https://blogs.oracle.com/security/entry/security_alert_for_cve_2012Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75303VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00018.htmlMailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/204Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2012/Apr/343Mailing List, Third Party Advisory
• http://www.kb.cert.org/vuls/id/359816Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.htmlVendor Advisory
• http://www.securityfocus.com/bid/53308Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027000Third Party Advisory, VDB Entry
• https://blogs.oracle.com/security/entry/security_alert_for_cve_2012Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75303VDB Entry

Published

May 8, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1669Directory traversal vulnerability in index.php in phpMoneyBo…
• CVE-2012-1670admin/index.php in PHP Grade Book before 1.9.5 BETA allows r…
• CVE-2012-1671Directory traversal vulnerability in index.php in phpPaleo 4…
• CVE-2012-1672SQL injection vulnerability in getcity.php in Hotel Booking …
• CVE-2012-1673SQL injection vulnerability in loginscript.php in e-ticketin…
• CVE-2012-1674Unspecified vulnerability in the Siebel Clinical component i…
• CVE-2012-1676Unspecified vulnerability in the Oracle FLEXCUBE Direct Bank…
• CVE-2012-1677Unspecified vulnerability in the Oracle Application Server S…
• CVE-2012-1678Unspecified vulnerability in the JD Edwards EnterpriseOne To…
• CVE-2012-1679Unspecified vulnerability in the Oracle FLEXCUBE Direct Bank…
• CVE-2012-1680Unspecified vulnerability in the Siebel CRM component in Ora…
• CVE-2012-1681Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, an…