Oracle MD2 component SDO_CODE_SIZE buffer overflow

Added: 12/18/2006 CVE: CVE-2004-1774 BID: 10871 OSVDB: 9867 Background Oracle Database is a relational database solution available for multiple platforms. Problem A buffer overflow in the SDOCODESIZE function in the MD2 component of Oracle Database allows remote attackers to execute arbitrary...

Oracle MD2 component SDO_CODE_SIZE buffer overflow

Added: 12/18/2006 CVE: CVE-2004-1774 BID: 10871 OSVDB: 9867 Background Oracle Database is a relational database solution available for multiple platforms. Problem A buffer overflow in the SDOCODESIZE function in the MD2 component of Oracle Database allows remote attackers to execute arbitrary...

CVE-2004-1774

CVE-2004-1774: Buffer overflow in the MD2 package’s SDO_CODE_SIZE function (MDSYS.MD2.SDO_CODE_SIZE) on Oracle Database 10g before 10.1.0.2 Patch 2. The overflow is triggered by a long LAYER parameter, enabling arbitrary code execution. Public documentation indicates vulnerable Oracle 10g configu...

CVE-2004-1774

Buffer overflow in the SDOCODESIZE procedure of the MD2 package MDSYS.MD2.SDOCODESIZE in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter...