NVD

Id
71065  
Name
CVE-2004-0638  
Description
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-0638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366943 71065 CVE-2004-0638 20040905 Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i  View
366944 71065 CVE-2004-0638 20040902 Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability  View
366945 71065 CVE-2004-0638 http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
366946 71065 CVE-2004-0638 http://www.red-database-security.com/advisory/advisory_20040903_3.htm  View
366947 71065 CVE-2004-0638 11100  View
366948 71065 CVE-2004-0638 oracle-dbmssystem-bo(17254)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63022 JVNDB-2004-000364 Oracle Database の dbms_system.ksdwrt プロシージャにおいて任意のコードを実行される脆弱性 Oracle Database に含まれる dbms_system.ksdwrt プロシージャには、第二引数の文字列の長さのチェックの不備のため、過度に長い文字列が渡された場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0638 9065 CVE-2004-0638 71065 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000364.html 2004-09-02 2007-04-01 View