Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Remediation

References

CVE-2003-0222

Related Vulnerabilities

MediaWiki Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-31556)

WordPress Plugin LinkedIn by BestWebSoft Cross-Site Scripting (1.0.4)

WordPress Plugin The Plus Addons for Elementor Cross-Site Scripting (4.1.11)

WordPress Plugin Calendar Event Multi View Security Bypass (1.4.06)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce CSV Injection (5.5.2)

Severity

Critical

Classification

CVE-2003-0222 CWE-119

Tags

Missing Update Known Vulnerabilities