Description

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.

Remediation

References

CVE-2003-0222

Related Vulnerabilities

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.7.5)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14320)

WordPress Plugin Hitasoft FLV Player 'id' Parameter SQL Injection (1.1)

WordPress Plugin WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Multiple Vulnerabilities (1.8)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.12)

Severity

Critical

Classification

CVE-2003-0222 CWE-119

Tags

Missing Update Known Vulnerabilities