PT-2003-1941 · Oracle · Oracle 9I Database

Published 2003-10-25 · Updated 2017-07-11 · CVE-2003-0894

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle 9i Database versions 9.0.x through 9.2.x before 9.2.0.4 Oracle 9i Database version 9.2.0.4 and later are not affected, but since only versions before 9.2.0.4 are vulnerable, the correct representation is: Oracle 9i Database versions prior to 9.2.0.4

Description A buffer overflow issue exists in the oracle and oracleO programs, allowing local users to execute arbitrary code via a long command line argument.

Recommendations For Oracle 9i Database versions prior to 9.2.0.4, update to version 9.2.0.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2003-0894

Affected Products

Oracle 9I Database

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2003-0894 · Security Note
• http://securitytracker.com/id?1007956 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13451 · Note
• http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf · Note
• http://securityfocus.com/bid/8844 · Note
• http://kb.cert.org/vuls/id/496340 · Note
• http://securityfocus.com/bid/8845 · Note