CVE-2002-0947 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Application Server

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
8.6%
top 7.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Application ServerOracle Reports
Timeline
PublishedOct 4
Latest updateApr 30

Description

Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/reports6.0.8

Patches

Patch: www.iss.net ↗Patch: www.kb.cert.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c7c6-jrm9-fh57: Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6↗2022-04-30
▶
CVEList
CVE-2002-0947: Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6↗2003-04-02
▶
CVE-2002-0947 — Oracle Application Server vulnerability | cvebase