Oracle Database Server XDB PITRIG_TRUNCATE Procedure Buffer Overflow (CVE-2008-0339)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Oracle XDB component PITRIG_TRUNCATE buffer overflow

Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...

CVE-2008-0339

Oracle Database Server XDB PITRIG_TRUNCATE buffer overflow (CVE-2008-0339) affects Oracle Database Server 10g/10.1.0.5 with XDB.XDB_PITRIG_PKG. A remote, authenticated attacker can exploit a buffer overflow in PITRIG_TRUNCATE by supplying long OWNER/NAME arguments, potentially executing arbitrary...