Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1264
oracle
isql*plus
buffer overflow
cve-2002-1264
database security
remote code execution
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.49 Medium
EPSS
Percentile
97.5%
Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.
Affected configurations
Node
oracleoracle9iMatch9.0
ORoracleoracle9iMatch9.0.1
ORoracleoracle9iMatch9.0.1.2
ORoracleoracle9iMatch9.0.1.3
ORoracleoracle9iMatch9.0.2
ORoracleoracle9iMatchrelease_2_9.2.1
ORoracleoracle9iMatchrelease_2_9.2.2
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.49 Medium
EPSS
Percentile
97.5%
Related for CVE-2002-1264