Lucene search

K
cve[email protected]CVE-2003-0095
HistoryMar 03, 2003 - 5:00 a.m.

CVE-2003-0095

2003-03-0305:00:00
CWE-119
web.nvd.nist.gov
22
cve-2003-0095
buffer overflow
oracle.exe
oracle database server
remote code execution
authentication
loadpsp

8.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.646 Medium

EPSS

Percentile

97.9%

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary code via a long username that is provided during login, as exploitable through client applications that perform their own authentication, as demonstrated using LOADPSP.

8.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.646 Medium

EPSS

Percentile

97.9%