Lucene search

[email protected]CVE-2003-0222

HistoryMay 12, 2003 - 4:00 a.m.

CVE-2003-0222

2003-05-1204:00:00

CWE-119

[email protected]

web.nvd.nist.gov

oracle

net services

oracle database server

buffer overflow

cve-2003-0222

security vulnerability

7.7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.349 Low

EPSS

Percentile

97.1%

JSON

Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a “CREATE DATABASE LINK” query containing a connect string with a long USING parameter.

CPENameOperatorVersion
oracle:database_serveroracle database servereq8.0.5.1
oracle:oracle8ioracle oracle8ieq8.0x
oracle:oracle9ioracle oracle9ieq9.0.1
oracle:oracle9ioracle oracle9ieq9.0.2
oracle:oracle8ioracle oracle8ieq8.0.6
oracle:database_serveroracle database servereq8.1.7
oracle:database_serveroracle database servereq8.1.5
oracle:oracle9ioracle oracle9ieq9.0
oracle:oracle8ioracle oracle8ieq8.1.6
oracle:database_serveroracle database servereq9.2.1

CPE	Name	Operator	Version
oracle:database_server	oracle database server	eq	8.0.5.1
oracle:oracle8i	oracle oracle8i	eq	8.0x
oracle:oracle9i	oracle oracle9i	eq	9.0.1
oracle:oracle9i	oracle oracle9i	eq	9.0.2
oracle:oracle8i	oracle oracle8i	eq	8.0.6
oracle:database_server	oracle database server	eq	8.1.7
oracle:database_server	oracle database server	eq	8.1.5
oracle:oracle9i	oracle oracle9i	eq	9.0
oracle:oracle8i	oracle oracle8i	eq	8.1.6
oracle:database_server	oracle database server	eq	9.2.1

Rows per page:

1-10 of 311

References

marc.info/?l=bugtraq&m=105162831008176&w=2

marc.info/?l=ntbugtraq&m=105163376015735&w=2

otn.oracle.com/deploy/security/pdf/2003alert54.pdf

www.ciac.org/ciac/bulletins/n-085.shtml

www.securityfocus.com/bid/7453

exchange.xforce.ibmcloud.com/vulnerabilities/11885

7.7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.349 Low

EPSS

Percentile

97.1%

JSON

Related for CVE-2003-0222

nessus1