CVE-2003-1208 Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the....
HighCVSS 10.0
EPSS 13.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle9i | = enterprise_9.0.1 | No fix listed |
| oracle9i | = enterprise_9.2.0 | No fix listed |
| oracle9i | = enterprise_9.2.0.1 | No fix listed |
| oracle9i | = enterprise_9.2.0.2 | No fix listed |
| oracle9i | = personal_9.0.1 | No fix listed |
| oracle9i | = personal_9.2 | No fix listed |
| oracle9i | = personal_9.2.0.1 | No fix listed |
| oracle9i | = personal_9.2.0.2 | No fix listed |
| oracle9i | = standard_9.0 | No fix listed |
| oracle9i | = standard_9.0.1 | No fix listed |
| oracle9i | = standard_9.0.1.2 | No fix listed |
| oracle9i | = standard_9.0.1.3 | No fix listed |
| oracle9i | = standard_9.0.1.4 | No fix listed |
| oracle9i | = standard_9.0.2 | No fix listed |
| oracle9i | = standard_9.2 | No fix listed |
| oracle9i | = standard_9.2.0.1 | No fix listed |
| oracle9i | = standard_9.2.0.2 | No fix listed |
References
- 20040205 Oracle Database 9ir2 Interval Conversion Functions Buffer Overflow exploit mailing-list vendor-advisory
- 10805 exploit patch third-party-advisory
- O-093 government-resource patch third-party-advisory vendor-advisory
- VU#240174 patch third-party-advisory us-government-resource
- VU#399806 patch third-party-advisory us-government-resource
- VU#819126 patch third-party-advisory us-government-resource
- VU#846582 patch third-party-advisory us-government-resource
- www.nextgenss.com exploit patch
- www.nextgenss.com exploit patch
- www.nextgenss.com exploit patch
- www.nextgenss.com exploit
- 3837 exploit patch vdb-entry vendor-advisory
- 3838 exploit patch vdb-entry vendor-advisory
- 3839 exploit patch vdb-entry vendor-advisory
- 3840 exploit patch vdb-entry vendor-advisory
- 9587 exploit patch vdb-entry vendor-advisory
- oracle-multiple-function-bo(15060) vdb-entry