Oracle extproc buffer overflow (#NISR23122004A)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g extproc buffer overflow Systems Affected: Oracle 10g on all operating systems Severity: High Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...

Oracle extproc directory traversal (#NISR23122004B)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g/9i extproc directory traversal Systems Affected: Oracle 10g/9i on all operating systems Severity: Medium Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...

Oracle extproc local command execution (#NISR23122004C)

NGSSoftware Insight Security Research Advisory Name: Oracle 10g/9i extproc local command execution Systems Affected: Oracle 10g/9i on all operating systems Severity: Medium Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...

PT-2004-2280 · Oracle · Oracle 10G

Name of the Vulnerable Software and Affected Versions: Oracle 10g Description: A buffer overflow issue exists in the extproc component, allowing remote attackers to execute arbitrary code. This is achieved by manipulating environment variables in the library name, which are expanded after the...

CVE-2003-0634

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name...

CVE-2003-0634

The vulnerability (CVE-2003-0634) affects Oracle9i Database Release 2/1 and Oracle 8i, due to a stack-based buffer overflow in the PL/SQL EXTPROC component. An authenticated (and in some cases arbitrary) database user can potentially execute arbitrary code by supplying a long library name. This s...

Oracle Extproc Buffer Overflow (#NISR25072003)

NGSSoftware Insight Security Research Advisory Name: Oracle Extproc Buffer Overflow Systems Affected: Most OS platforms; Oracle9i Database Release 2 and 1, 8i Severity: High Risk Vendor URL: http://www.oracle.com Authors: David Litchfield [email protected] Chris Anley [email protected]...

CVE-2002-0567

Oracle 8i/9i with PL/SQL EXTPROC vulnerable: remote attackers can bypass authentication and connect via the TNS Listener to the extproc process to execute arbitrary functions. Impact is remote code execution with the Oracle user’s privileges; no explicit exploit code/status is provided in the doc...