CVE-2003-0634

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.

Desbordamiento de búfer basado en la pila en EXTPROC de Oracle 9i Database Release 2 y 1, y Oracle 8i, permite a usuarios autenticados de la base de datos, posiblemente sólo aquellos con privilegios CREATE LIBRARY o CREATE ANY LIBRARY, ejecutar código arbitrario mediante un nombre de librería largo.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2003-08-01 CVE Reserved
2003-08-02 CVE Published
2023-03-07 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0105.html	Mailing List
http://marc.info/?l=bugtraq&m=105914979629857&w=2	Mailing List
http://marc.info/?l=bugtraq&m=105916455814904&w=2	Mailing List
http://marc.info/?l=ntbugtraq&m=105915485303327&w=2	Mailing List
http://otn.oracle.com/deploy/security/pdf/2003alert57.pdf	X_refsource_confirm
http://www.kb.cert.org/vuls/id/936868	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/12721	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.securityfocus.com/bid/8267	2017-07-11

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.5_.0.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.5_.0.2 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.5_.1.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.1.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.6_.0.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.0.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.6_.1.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.1.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.7_.0.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.0.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				enterprise_8.1.7_.1.0 Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.1.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.5 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.5"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.6 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.6"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.7 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.7_.0.0 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.0.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.7_.1 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle8i Search vendor "Oracle" for product "Oracle8i"				standard_8.1.7_.4 Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.4"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				client_9.2.0.1 Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				client_9.2.0.2 Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				enterprise_9.0.1 Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				enterprise_9.2.0.1 Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				enterprise_9.2.0.2 Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				personal_9.0.1 Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				personal_9.2.0.1 Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				personal_9.2.0.2 Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0.1 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0.1.2 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0.1.3 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.3"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0.1.4 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.4"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.0.2 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.2"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.2.0.1 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.1"		-		Affected
Oracle Search vendor "Oracle"		Oracle9i Search vendor "Oracle" for product "Oracle9i"				standard_9.2.0.2 Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.2"		-		Affected