Description

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

Remediation

References

CVE-2002-0567

Related Vulnerabilities

WordPress 3.9.x Cross-Site Scripting Vulnerability (3.9 - 3.9.9)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6403)

PHP Improper Input Validation Vulnerability (CVE-2017-8923)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6730)

Contao Improper Encoding or Escaping of Output Vulnerability (CVE-2019-19714)

Severity

High

Classification

CVE-2002-0567

Tags

Missing Update Known Vulnerabilities