Oracle Database CTXSYS.DRVDISP.TABLEFUNC_ASOWN Buffer Overflow (CVE-2011-2301)

A buffer overflow vulnerability has been reported in Oracle's Database server...

TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN function)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory October 20, 2011 Risk Level: Medium Affected versions: Oracle Database Server version 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication to Database Server is needed Credits: This vulnerability was discovered a...

CVE-2011-2301

CVE-2011-2301 affects Oracle Database Server (10gR1/R2, 11gR1) via CTXSYS.DRVDISP.TABLEFUNC_ASOWN in Oracle Text. The root cause is a buffer overflow when TABLEFUNC_ASOWN is called with long input, allowing remote authenticated users to compromise confidentiality, integrity and availability. Docu...