CVE-2003-0634

3 documents3 sources
Severity
7.5HIGH
EPSS
3.3%
top 12.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Oracle8iOracle Oracle9i
Timeline
PublishedAug 27
Latest updateApr 29

Description

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/oracle9i16 versions+15
▶NVDoracle/oracle8i13 versions+12

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m7j4-ff48-c869: Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database us↗2022-04-29
▶
CVEList
CVE-2003-0634: Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database us↗2003-08-02
▶