Vulnerability in Oracle Database Server
CVE-2002-0567
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.
EPSS: 0.087 (94.6th percentile) — read the EPSS interpretation.
Affected products
- Oracle Database_server — versions 8.0.1, 8.0.2, 8.0.3
- Oracle Oracle8i — versions 8.1.5, 8.1.6, 8.1.7
- Oracle Oracle9i — versions 9.0, 9.0.1
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)