CVE

Id
9791  
CVE No.
CVE-2004-1363  
Status
Candidate  
Description
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.  
Phase
Assigned (20050107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66661 9791 CVE-2004-1363 BUGTRAQ:20041223 Oracle extproc buffer overflow (#NISR23122004A)  View
66662 9791 CVE-2004-1363 URL:http://marc.info/?l=bugtraq&m=110382345829397&w=2  View
66663 9791 CVE-2004-1363 MISC:http://www.ngssoftware.com/advisories/oracle23122004.txt  View
66664 9791 CVE-2004-1363 CONFIRM:http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
66665 9791 CVE-2004-1363 SUNALERT:101782  View
66666 9791 CVE-2004-1363 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1  View
66667 9791 CVE-2004-1363 CERT:TA04-245A  View
66668 9791 CVE-2004-1363 URL:http://www.us-cert.gov/cas/techalerts/TA04-245A.html  View
66669 9791 CVE-2004-1363 CERT-VN:VU#316206  View
66670 9791 CVE-2004-1363 URL:http://www.kb.cert.org/vuls/id/316206  View
66671 9791 CVE-2004-1363 BID:10871  View
66672 9791 CVE-2004-1363 URL:http://www.securityfocus.com/bid/10871  View
66673 9791 CVE-2004-1363 XF:oracle-extproc-library-bo(18659)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63013 JVNDB-2004-000355 Oracle 製品の extproc におけるディレクトリトラバーサルの脆弱性 ------------ CVE-2004-1364 9791 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000355.html  View