Description

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.

Remediation

References

CVE-2003-0095

Related Vulnerabilities

Apache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-0232)

MySQL CVE-2021-2299 Vulnerability (CVE-2021-2299)

Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32808)

WordPress Plugin All-in-One Event Calendar Multiple Cross-Site Scripting Vulnerabilities (1.5)

Severity

Critical

Classification

CVE-2003-0095 CWE-119

Tags

Missing Update Known Vulnerabilities