PT-2003-1823 · Oracle · Oracle 9I Database

Published 2003-09-03 · Updated 2017-09-28 · CVE-2003-0727

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Oracle 9i Database Release 2

Description: The issue is related to multiple buffer overflows in the XML Database (XDB) functionality, which can be exploited by local users to cause a denial of service or hijack user sessions.

Recommendations: For Oracle 9i Database Release 2, consider restricting access to the XDB functionality until a patch is available. As a temporary workaround, limiting the privileges of local users may help minimize the risk of session hijacking.

Exploit

Fix

Related Identifiers

CVE-2003-0727

Affected Products

Oracle 9I Database

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/oracle9i_xdb_ftp_unlock.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/oracle9i_xdb_ftp_pass.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle9i_xdb_pass.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16731 · Exploit
• 🔥 https://exploit-db.com/exploits/16714 · Exploit
• 🔥 https://exploit-db.com/exploits/16809 · Exploit
• 🔥 https://exploit-db.com/exploits/80 · Exploit
• 🔥 https://exploit-db.com/exploits/1365 · Exploit
• 🔥 https://exploit-db.com/exploits/42780 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0727 · Security Note
• http://otn.oracle.com/deploy/security/pdf/2003Alert58.pdf · Note