Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=110382345829397&w=2 | Mailing List |
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1 | Broken Link |
| http://www.kb.cert.org/vuls/id/316206 | Third Party Advisory US Government Resource |
| http://www.ngssoftware.com/advisories/oracle23122004.txt | Broken Link Patch Vendor Advisory |
| http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf | Broken Link Patch Vendor Advisory |
| http://www.securityfocus.com/bid/10871 | Broken Link Patch Third Party Advisory VDB Entry |
| http://www.us-cert.gov/cas/techalerts/TA04-245A.html | Broken Link Patch Third Party Advisory US Government Resource |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18659 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-08-04 04:00
Updated : 2024-02-02 14:01
NVD link : CVE-2004-1363
Mitre link : CVE-2004-1363
CVE.ORG link : CVE-2004-1363
JSON object : View
Products Affected
oracle
- e-business_suite
- application_server
- collaboration_suite
- enterprise_manager_database_control
- enterprise_manager_grid_control
- enterprise_manager
- database_server
CWE
CWE-131
Incorrect Calculation of Buffer Size