Description

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.

Remediation

References

CVE-2003-0095

Related Vulnerabilities

WordPress Plugin WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection-StopBadBots Unspecified Vulnerability (6.66)

Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477)

Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3613)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0995)

WordPress Plugin Global Content Blocks Cross-Site Request Forgery (2.1.5)

Severity

Critical

Classification

CVE-2003-0095 CWE-119

Tags

Missing Update Known Vulnerabilities