Unscored severity · published Sep 2, 2004
CVE-2004-0637
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible
–
CVSS
17.8%
EPSS
No
On KEV
Description
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
Oracle8i · Oracle
enterprise_8.1.7_.4; standard_8.1.7_.4 · source: NVD
OR
Oracle9i · Oracle
enterprise_9.2.0.4; personal_9.2.0.4; standard_9.0.1.3; standard_9.2.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0637
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0637
Patch
http://secunia.com/advisories/12409/
Patch
http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true
Patch
http://www.kb.cert.org/vuls/id/316206
www.securityfocus.com
http://www.securityfocus.com/bid/11099
More from Oracle8i
–
CVE-2006-0552
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as…
–
CVE-2006-0262
Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified impact and attack…
–
CVE-2006-0271
Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as…
–
CVE-2005-3641
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username
–
CVE-2004-0638
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and…