Unscored severity · published Nov 17, 2003
CVE-2003-0894
Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
Oracle9i · Oracle
enterprise_9.0.1; enterprise_9.2.0.4; personal_9.0.1; personal_9.2.0.4; standard_9.0; standard_9.0.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0894
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0894
otn.oracle.com
http://otn.oracle.com/deploy/security/pdf/2003alert59.pdf
securitytracker.com
http://securitytracker.com/id?1007956
US Government Resource
http://www.kb.cert.org/vuls/id/496340
www.securityfocus.com
http://www.securityfocus.com/bid/8844
www.securityfocus.com
http://www.securityfocus.com/bid/8845
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/13451
More from Oracle9i
–
CVE-2006-6703
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in…
–
CVE-2006-1705
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the…
–
CVE-2006-0552
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as…
–
CVE-2006-0272
Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln#…
–
CVE-2006-0271
Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as…