iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop…

1. 2005-10-07 First public exploit (EDB-26331)
2. 2005-10-14 Published

21.55% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-26331 Oracle 9.0 iSQL*Plus - TLS Listener Remote Denial of Service dos, 2005-10-07
• securityfocus.com http://www.securityfocus.com/bid/15032 referenced PoC, tagged "exploit" by a source, unverified
• archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html referenced PoC, tagged "exploit" by a source, unverified
• red-database-security.com http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html referenced PoC, tagged "exploit" by a source, unverified

Technology feeds

• Oracle Database rss critical rss

• secunia.com /advisories/15991/

  third-party-advisory, patch, vendor-advisory

• oracle.com /technology/deploy/security/pdf/cpujul2005.html

  patch, vendor-advisory

• securityfocus.com /bid/15032

  vdb-entry, exploit

• archives.neohapsis.com /archives/fulldisclosure/2005-10/0176.html

  mailing-list, exploit, vendor-advisory

• red-database-security.com /advisory/oracle_isqlplus_shutdown.html

  exploit, vendor-advisory

• marc.info /?l=bugtraq&m=112870589127719&w=2

  mailing-list

• exchange.xforce.ibmcloud.com /vulnerabilities/22544

  vdb-entry

• osvdb.org /20056

  vdb-entry

• securityreason.com /securityalert/64

  third-party-advisory

• CVE List CVE-2005-3206
• NVD CVE-2005-3206

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.