CVE-2007-4517 Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
MediumCVSS 6.0
EPSS 5.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle database server | = release_2 | No fix listed |
References
- 20071107 Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability third-party-advisory
- 27526 third-party-advisory vendor-advisory
- 8524 third-party-advisory
- 20071108 Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability mailing-list
- 26374 vdb-entry
- 1018908 vdb-entry
- ADV-2007-3803 vdb-entry
- oracle-pitrig-dropmetadata-bo(38318) vdb-entry