CVE-2002-1264 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Oracle9i

3 documents3 sources

Severity

7.5HIGHNVD

EPSS

7.4%

top 8.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Oracle9i

Timeline

PublishedNov 12

Latest updateApr 30

Description

Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/oracle9i7 versions+6

🔴Vulnerability Details

GHSA

GHSA-88qq-cpf5-5jr8: Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERI↗2022-04-30

▶

CVEList

CVE-2002-1264: Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERI↗2004-09-01

▶