CVE

Id
6925  
CVE No.
CVE-2003-0096  
Status
Candidate  
Description
Multiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow remote attackers to execute arbitrary code via (1) a long conversion string argument to the TO_TIMESTAMP_TZ function, (2) a long time zone argument to the TZ_OFFSET function, or (3) a long DIRECTORY parameter to the BFILENAME function.  
Phase
Modified (20071016)  
Votes
ACCEPT(4) Baker, Cole, Frech, Wall | NOOP(2) Christey, Cox  
Comments
Christey> Modify the description to omit 8.0.6, as the Oracle advisory | does not list it. (However, NGSSoftware does, perhaps as the | result of a typo or cut-and-paste error in their advisory). | | CIAC:N-046 | URL:http://www.ciac.org/ciac/bulletins/n-046.shtml | BID:6850 | URL:http://www.securityfocus.com/bid/6850 | BID:6847 | URL:http://www.securityfocus.com/bid/6847 | BID:6848 | URL:http://www.securityfocus.com/bid/6848 | MISC:http://www.nextgenss.com/advisories/ora-bfilebo.txt | MISC:http://www.nextgenss.com/advisories/ora-tzofstbo.txt | MISC:http://www.nextgenss.com/advisories/ora-tmstmpbo.txt  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39834 6925 CVE-2003-0096 BUGTRAQ:20030217 Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b)  View
39835 6925 CVE-2003-0096 URL:http://marc.info/?l=bugtraq&m=104549743326864&w=2  View
39836 6925 CVE-2003-0096 VULNWATCH:20030217 Oracle TZ_OFFSET Remote System Buffer Overrun (#NISR16022003c)  View
39837 6925 CVE-2003-0096 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0075.html  View
39838 6925 CVE-2003-0096 VULNWATCH:20030217 Oracle bfilename function buffer overflow vulnerability (#NISR16022003e)  View
39839 6925 CVE-2003-0096 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0083.html  View
39840 6925 CVE-2003-0096 VULNWATCH:20030217 Oracle unauthenticated remote system compromise (#NISR16022003a)  View
39841 6925 CVE-2003-0096 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0073.html  View
39842 6925 CVE-2003-0096 MISC:http://www.nextgenss.com/advisories/ora-bfilebo.txt  View
39843 6925 CVE-2003-0096 MISC:http://www.nextgenss.com/advisories/ora-tmstmpbo.txt  View
39844 6925 CVE-2003-0096 MISC:http://www.nextgenss.com/advisories/ora-tzofstbo.txt  View
39845 6925 CVE-2003-0096 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2003alert50.pdf  View
39846 6925 CVE-2003-0096 CERT-VN:VU#840666  View
39847 6925 CVE-2003-0096 URL:http://www.kb.cert.org/vuls/id/840666  View
39848 6925 CVE-2003-0096 BUGTRAQ:20030217 Oracle TZ_OFFSET Remote System Buffer Overrun (#NISR16022003c)  View
39849 6925 CVE-2003-0096 URL:http://marc.info/?l=bugtraq&m=104549782327321&w=2  View
39850 6925 CVE-2003-0096 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2003alert49.pdf  View
39851 6925 CVE-2003-0096 CERT-VN:VU#743954  View
39852 6925 CVE-2003-0096 URL:http://www.kb.cert.org/vuls/id/743954  View
39853 6925 CVE-2003-0096 BUGTRAQ:20030217 Oracle bfilename function buffer overflow vulnerability (#NISR16022003e)  View
39854 6925 CVE-2003-0096 URL:http://marc.info/?l=bugtraq&m=104550346303295&w=2  View
39855 6925 CVE-2003-0096 CONFIRM:http://otn.oracle.com/deploy/security/pdf/2003alert48.pdf  View
39856 6925 CVE-2003-0096 CERT-VN:VU#663786  View
39857 6925 CVE-2003-0096 URL:http://www.kb.cert.org/vuls/id/663786  View
39858 6925 CVE-2003-0096 CERT:CA-2003-05  View
39859 6925 CVE-2003-0096 URL:http://www.cert.org/advisories/CA-2003-05.html  View
39860 6925 CVE-2003-0096 CIAC:N-046  View
39861 6925 CVE-2003-0096 URL:http://www.ciac.org/ciac/bulletins/n-046.shtml  View
39862 6925 CVE-2003-0096 BID:6847  View
39863 6925 CVE-2003-0096 URL:http://www.securityfocus.com/bid/6847  View
39864 6925 CVE-2003-0096 BID:6848  View
39865 6925 CVE-2003-0096 URL:http://www.securityfocus.com/bid/6848  View
39866 6925 CVE-2003-0096 BID:6850  View
39867 6925 CVE-2003-0096 URL:http://www.securityfocus.com/bid/6850  View
39868 6925 CVE-2003-0096 XF:oracle-bfilename-directory-bo(11325)  View
39869 6925 CVE-2003-0096 URL:http://www.iss.net/security_center/static/11325.php  View
39870 6925 CVE-2003-0096 XF:oracle-tzoffset-bo(11326)  View
39871 6925 CVE-2003-0096 URL:http://www.iss.net/security_center/static/11326.php  View
39872 6925 CVE-2003-0096 XF:oracle-totimestamptz-bo(11327)  View

Related JVN