NVD

Id
72153  
Name
CVE-2004-1774  
Description
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-31  
Modified Date
2017-07-10  
Seq
2004-1774  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
372677 72153 CVE-2004-1774 20040902 [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server  View
372678 72153 CVE-2004-1774 http://www.appsecinc.com/resources/alerts/oracle/2004-0001/  View
372679 72153 CVE-2004-1774 http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php  View
372680 72153 CVE-2004-1774 http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf  View
372681 72153 CVE-2004-1774 http://www.securiteam.com/securitynews/5CP010KE0W.html  View
372682 72153 CVE-2004-1774 13145  View
372683 72153 CVE-2004-1774 oracle-mdsysmd2sdocodesize-bo(20078)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62058 JVNDB-2005-000260 Oracle 製品の SDO_CODE_SIZE プロシージャにおけるバッファオーバーフローの脆弱性 ------------ CVE-2004-1774 10201 CVE-2004-1774 72153 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000260.html 2005-04-13 2007-04-01 View