Description

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.

Remediation

References

CVE-2004-1365

Related Vulnerabilities

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.12)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5651)

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8391)

WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Request Forgery (4.3.24)

WordPress Plugin WP Editor.md Cross-Site Scripting (1.6)

Severity

Medium

Classification

CVE-2004-1365

Tags

Missing Update Known Vulnerabilities