Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-1180 — Cross-site Scripting in Oracle Oracle8i

CWE-79 — Cross-site Scripting6 documents5 sources
Severity
4.6MEDIUMNVD
EPSS
0.7%
top 28.37%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Oracle Oracle8i
Timeline
PublishedJan 9
Latest updateApr 30

Description

Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/oracle8i8.1.5

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xmgq-gq24-73mw: Buffer overflow in cmctl program in Oracle 8↗2022-04-30
▶
CVEList
CVE-2000-1180: Buffer overflow in cmctl program in Oracle 8↗2001-05-07
▶

💥Exploits & PoCs

2
Exploit-DB
Juniper Networks Secure Access 2000 - 'rdremediate.cgi' Cross-Site Scripting↗2008-02-28
▶
Exploit-DB
Oracle 8.x - cmctl Buffer Overflow↗2000-11-20
▶

📋Vendor Advisories

1
Juniper
CVE-2008-1180: Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attac↗2008-03-06
▶
CVE-2000-1180 — Cross-site Scripting in Oracle Oracle8i | cvebase