CVE-2003-0096
published 2003-03-03CVE-2003-0096: Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long…
PriorityP336critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
15.93%
96.5th percentile
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | oracle8i | — | — |
| oracle | oracle8i | — | — |
| oracle | oracle9i | — | — |
| oracle | oracle9i | — | — |
| oracle | oracle9i | — | — |
| oracle | oracle9i | — | — |
| oracle | oracle9i | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q3h7-99f2-hhfv: Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8
ghsa_unreviewed·2022-04-29
CVE-2003-0096 [HIGH] CWE-119 GHSA-q3h7-99f2-hhfv: Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.
Red Hat
mod_python remote DoS
vendor_redhat·2004-01-22·CVSS 5.0
CVE-2004-0096 [MEDIUM] mod_python remote DoS
mod_python remote DoS
Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.
No detection rules found.
No public exploits indexed.
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.htmlhttp://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.htmlhttp://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.htmlhttp://marc.info/?l=bugtraq&m=104549743326864&w=2http://marc.info/?l=bugtraq&m=104549782327321&w=2http://marc.info/?l=bugtraq&m=104550346303295&w=2http://otn.oracle.com/deploy/security/pdf/2003alert48.pdfhttp://otn.oracle.com/deploy/security/pdf/2003alert49.pdfhttp://otn.oracle.com/deploy/security/pdf/2003alert50.pdfhttp://www.cert.org/advisories/CA-2003-05.htmlhttp://www.ciac.org/ciac/bulletins/n-046.shtmlhttp://www.iss.net/security_center/static/11325.phphttp://www.iss.net/security_center/static/11326.phphttp://www.iss.net/security_center/static/11327.phphttp://www.kb.cert.org/vuls/id/663786http://www.kb.cert.org/vuls/id/743954http://www.kb.cert.org/vuls/id/840666http://www.nextgenss.com/advisories/ora-bfilebo.txthttp://www.nextgenss.com/advisories/ora-tmstmpbo.txthttp://www.nextgenss.com/advisories/ora-tzofstbo.txthttp://www.securityfocus.com/bid/6847http://www.securityfocus.com/bid/6848http://www.securityfocus.com/bid/6850http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.htmlhttp://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.htmlhttp://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.htmlhttp://marc.info/?l=bugtraq&m=104549743326864&w=2http://marc.info/?l=bugtraq&m=104549782327321&w=2http://marc.info/?l=bugtraq&m=104550346303295&w=2http://otn.oracle.com/deploy/security/pdf/2003alert48.pdfhttp://otn.oracle.com/deploy/security/pdf/2003alert49.pdfhttp://otn.oracle.com/deploy/security/pdf/2003alert50.pdfhttp://www.cert.org/advisories/CA-2003-05.htmlhttp://www.ciac.org/ciac/bulletins/n-046.shtmlhttp://www.iss.net/security_center/static/11325.phphttp://www.iss.net/security_center/static/11326.phphttp://www.iss.net/security_center/static/11327.phphttp://www.kb.cert.org/vuls/id/663786http://www.kb.cert.org/vuls/id/743954http://www.kb.cert.org/vuls/id/840666http://www.nextgenss.com/advisories/ora-bfilebo.txthttp://www.nextgenss.com/advisories/ora-tmstmpbo.txthttp://www.nextgenss.com/advisories/ora-tzofstbo.txthttp://www.securityfocus.com/bid/6847http://www.securityfocus.com/bid/6848http://www.securityfocus.com/bid/6850
2003-03-03
Published